Privacy policy

This site, marieneostolaza.com, belongs to Mariene Ostolaza, a physical therapist in Puerto Rico. In this policy, “I” and “my” refer to me.

Only what you choose to send me:

• Contact form: your name, email, phone (optional), topic and message, and the language of the page you wrote from.
• My replies: when I answer you from the site, I keep the text of my reply and the date.
• Newsletter: your email, language, the topics you’re interested in (if you choose any), where on the site you subscribed, and the dates you subscribed, confirmed or unsubscribed. I also keep a record of which newsletter emails were sent to you.
• Support requests: your email, the type of request, any details you write, and the dates.

This site uses no analytics tools, advertising pixels or third-party trackers. Fonts and images are served from the site itself.

I don’t sell your information or share it with anyone for advertising.

• To answer your message (you asked me to when you wrote).
• To send you the newsletter, only if you subscribed and confirmed from your inbox. You can unsubscribe at any time.
• To handle your requests about your data.
• To protect the site against abuse and spam.

I only use strictly necessary cookies, and they aren’t for you as a visitor: one lets people with the password preview the site before launch, and another keeps me signed in to the admin area. There are no analytics or advertising cookies.

To limit spam, the site counts how often each form is used from the same connection. That count is stored with a code derived from your IP address (not the address itself) and is deleted periodically.

I use a few providers that process information on my behalf, only so the site works:

• Vercel: hosts the site.
• Supabase: the database where messages, subscriptions and requests are stored.
• Resend: sends the emails (replies, confirmations and the newsletter).
• Google: only so I can sign in to my admin area. As a visitor, you never interact with Google through this site.

I keep your messages and subscription until you ask me to delete them or they’re no longer needed. If you unsubscribe from the newsletter, I keep your email marked “unsubscribed” and the date, only so I never write to you again; if you’d rather I delete it completely, ask via Support.

• The whole site runs over an encrypted connection (HTTPS).
• Only I can enter the admin area, with my Google account and an access list.
• The database can’t be reached from the browser; only the site’s server can read it.
• Confirmation and unsubscribe links are unique and can’t be forged.

You can ask me for a copy of your data, correct it, delete it, or unsubscribe from the newsletter. Do it via Support: I’ll ask you to confirm from your inbox to make sure the request is yours. Every newsletter email also includes a one-tap unsubscribe link.

This site is for mothers, fathers, caregivers, professionals and adult athletes. It isn’t directed at children under 13, and I don’t knowingly collect information from them. If you think a child has sent me information, write to me via Support and I’ll delete it.

Please don’t send detailed medical information through the forms. If you need an assessment, we’ll talk about it in person.

If I change this policy, I’ll update the date at the top of this page.