Privacy Policy

Origin Shift

Effective Date: April 22, 2026

This Privacy Policy describes how Origin Shift (“we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit origin-shift.com (the “Site”), book a clarity call, become a client, or otherwise interact with our services. Origin Shift is a hypnosis and Rapid Resolution Therapy® (RRT) practice based in California, USA, serving clients worldwide.

By using our Site or services, you agree to the practices described in this policy. If you do not agree, please do not use the Site or submit personal information to us.

1. How to Contact Us

For privacy questions, requests, or concerns, contact us at:

2. Information We Collect

We collect information in three ways: information you give us directly, information collected automatically, and information from third parties.

a. Information You Provide

  • Contact and booking information: name, email address, phone number, time zone, and scheduling preferences when you book a clarity call or session.

  • Health and wellness information: information you share during sessions, intake conversations, or written communications, which may include sensitive information about your emotional state, mental health history, personal challenges, relationships, or life circumstances. Sessions are conducted over Zoom and may be recorded with your consent (see Section 5).

  • Payment information: processed through our third-party payment processor (Stripe). We do not store your full credit card or bank account numbers on our servers.

  • Communications: any messages, emails, or voice notes you send us.

  • Mailing list: if you subscribe, your name and email address.

b. Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect:

  • IP address and approximate location

  • Browser type and device information

  • Pages viewed, time spent, referring URLs

  • Cookies and similar tracking technologies (see Section 7)

c. Information from Third Parties

We may receive information from:

  • Scheduling tools (e.g., Cal.com) when you book a call

  • Payment processors (e.g., Stripe) confirming transactions

  • Social media platforms if you contact us or interact with our content there

3. How We Use Your Information

We use your information to:

  • Schedule and conduct clarity calls and sessions

  • Deliver the services you’ve booked or purchased

  • Process payments and send receipts

  • Communicate with you about your sessions, scheduling, or questions

  • Send you emails you’ve opted in to (newsletters, updates)

  • Improve our Site, content, and services

  • Comply with legal obligations and protect our rights

  • Prevent fraud and maintain the security of our Site

We do not sell your personal information. We do not use your personal information to train AI models or share it with third parties for their own marketing purposes.

4. Confidentiality of Session Content

Information you share during hypnosis or RRT sessions is treated as strictly confidential. We do not disclose the content of your sessions to any third party except:

  • With your explicit written consent

  • When required by law (e.g., court order, mandated reporting of imminent harm to self or others, or suspected abuse of a child or vulnerable adult as required under applicable law)

  • To our own professional consultants or supervisors in de-identified form, where applicable

Please note: Origin Shift provides hypnosis and RRT® services. These are complementary wellness services and are not a substitute for licensed mental health care, medical advice, diagnosis, or treatment. Our confidentiality practices are a matter of professional ethics and client trust; they are not the same as HIPAA-protected health information or the legal privilege that applies to licensed psychotherapists.

5. How We Share Information and Service Providers

We share personal information only with service providers who help us run our business, and only to the extent necessary. These include:

  • Website hosting: Squarespace

  • Scheduling: Cal.com

  • Video sessions: Zoom

  • Payment processing: Stripe

  • Email and communications: Porkbun (email hosting), Kit (email marketing)

  • Analytics: Squarespace Analytics

Each of these providers has its own privacy policy and handles your data according to their own safeguards. We encourage you to review their policies.

Session Recordings

Sessions are conducted over Zoom and are typically recorded. Recording is disclosed when you book through Cal.com and again in your booking confirmation email, and no session is recorded without your consent.

Recordings contain audio and video of our session together and may include highly personal information you share during the work. They are stored in Zoom’s secure cloud, are accessible only to your practitioner, and are retained as part of your client record (see Section 8). We never share, publish, or use your session recordings for any purpose outside of serving you, except in the limited circumstances described in Section 4.

Recording is a standard part of our sessions and is required for you to work with us. If you are not comfortable with being recorded, please let us know before booking so we can discuss whether our services are the right fit.

We may also disclose information if required by law, to protect our legal rights, or in connection with a business transfer (for example, if Origin Shift is ever sold or merged).

6. International Data Transfers

We are based in the United States, and our service providers may store data in the U.S. or other countries. If you are located in the European Economic Area (EEA), the United Kingdom, Switzerland, or another jurisdiction with data protection laws, please be aware that your information will be transferred to and processed in the U.S.

Where required, we rely on appropriate safeguards for international transfers, such as the Standard Contractual Clauses approved by the European Commission, or equivalent mechanisms offered by our service providers.

7. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies to function properly, remember your preferences, and understand how visitors use the Site.

You can control cookies through your browser settings. Disabling cookies may affect Site functionality. Where required by law (for example, for EEA/UK visitors), we will ask for your consent before setting non-essential cookies.

8. Data Retention

We keep personal information only as long as needed for the purposes described in this policy, or as required by law. Specifically:

  • Session and client records, including session recordings: retained for at least 7 years after our last interaction, in line with professional best practice and tax recordkeeping requirements

  • Payment records: retained as required by tax and financial law

  • Mailing list data: retained until you unsubscribe or request deletion

  • Inquiry emails: retained for up to 2 years unless you become a client

When we no longer need your information, we delete or anonymize it. You may request early deletion of your session recordings at any time (see Section 9).

9. Your Privacy Rights

a. California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, disclose, and retain

  • Request a copy of the personal information we hold about you

  • Request correction of inaccurate personal information

  • Request deletion of your personal information, subject to legal exceptions

  • Opt out of the “sale” or “sharing” of personal information (we do not sell or share your information as those terms are defined under California law)

  • Limit the use of sensitive personal information

  • Be free from retaliation for exercising these rights

To exercise these rights, email us at maja@origin-shift.com. We will verify your identity before responding, and we aim to respond within 45 days.

b. EEA, UK, and Swiss Residents (GDPR / UK GDPR)

If you are located in the EEA, UK, or Switzerland, you have the right to:

  • Access your personal data

  • Request correction or erasure

  • Object to or restrict certain processing

  • Data portability

  • Withdraw consent at any time where processing is based on consent

  • Lodge a complaint with your local data protection authority

Our legal bases for processing your data are: (a) performance of a contract when you book services; (b) your consent for marketing emails, session recordings, and other optional data uses; (c) our legitimate interests in operating and improving our business; and (d) compliance with legal obligations.

c. Other Jurisdictions

Clients in other regions may have similar rights under local law. Contact us and we will make reasonable efforts to honor your request.

10. Children’s Privacy

Our services are intended for adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your personal information. These include encrypted storage through reputable service providers, access controls, and secure payment processing. However, no system is completely secure, and we cannot guarantee the security of information transmitted over the internet.

12. Third-Party Links

Our Site and emails may contain links to third-party websites or tools. We are not responsible for the privacy practices of those sites. Please review their privacy policies before sharing information with them.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective Date” above and, where appropriate, notify you by email or a notice on the Site. Your continued use of the Site after changes take effect means you accept the updated policy.

14. Contact

Questions, requests, or complaints about this Privacy Policy or our handling of your personal information can be sent to:

Email: maja@origin-shift.com