Private by design.

1. What this policy covers

This policy explains how The Attraction Report processes personal data when you visit attractionreport.com, contact us, join The Attraction Edit, book an Individual or Couples experience, submit intake material, take part in a session, or receive a report.

2. What we collect

Depending on how you use the service, we may process your name, email address, time zone, booking and payment status, communications with us, newsletter preferences, session notes, your descriptions of attraction, and the photographs or visual references you choose to submit. For couples, we may process the same categories for both participants.

Payment card details are intended to be handled directly by the payment provider and not stored by The Attraction Report.

3. Images and third-party material

The service may involve photographs of public figures, characters, people known to the client, past partners, or other adult subjects. These images are used only to understand the client's own reactions. We do not use appearance to assert sensitive facts about the person pictured. Please read the separate Photo Policy before submitting material.

4. Why we use your data

• to provide and personalize the service you purchased;
• to arrange and administer bookings, payments, rescheduling and customer support;
• to conduct the analytical process and prepare your report;
• to respond to messages and partnership enquiries;
• to send The Attraction Edit where you have subscribed;
• to maintain security, prevent misuse and meet legal obligations.

5. Legal bases

Where the GDPR applies, processing necessary to deliver a purchased experience is generally based on performance of a contract. Contact requests and service administration may also rely on legitimate interests where appropriate. Newsletter and non-essential marketing communications are based on consent. We will document any additional basis required for specific processing before launch.

6. Service providers

At launch, the service uses IONOS for website hosting and authenticated email delivery, Stripe for payment processing, and Cal.com for scheduling. Session delivery may use the video-call provider shown in your booking confirmation. Contact-form messages are delivered through our IONOS email account. Newsletter signups are stored in protected website storage and require email confirmation before becoming active. If we later use a dedicated newsletter delivery provider, this policy will be updated before subscriber data is transferred to that provider. Providers receive only the information needed for their role.

7. Retention

Raw intake images and working analysis files are normally deleted within 30 days after delivery of the final report. The completed report and core case notes may be kept for up to 90 days after delivery so we can handle corrections or reasonable follow-up, unless you request earlier deletion where available. Payment, invoice and other records that must be retained for legal, tax or accounting purposes are kept for the applicable required period. Contact messages are retained only as long as reasonably needed to handle the enquiry and related correspondence. Pending newsletter signups that are never confirmed may be periodically removed; confirmed newsletter data is kept until you withdraw consent, unsubscribe, or otherwise request deletion.

8. Marketing and case studies

Private client material is not used in public marketing, social posts, testimonials or case studies without separate, explicit permission. Permission to receive a service is not permission to publish your material.

9. Your rights

Where the GDPR applies, you may have rights including access, correction, deletion, restriction, objection, data portability and withdrawal of consent. You may also complain to a competent data protection supervisory authority. Contact privacy@attractionreport.com to exercise a right.

10. Cookies and similar technologies

Essential technologies may be used to provide the site and remember choices necessary for a requested service. Non-essential analytics, advertising or tracking technologies will not be activated without any consent required by applicable law. If we add them, the site will include an appropriate consent mechanism and this policy will be updated.

11. Security

We use reasonable technical and organizational measures appropriate to the nature of the service, including restricted access to client material and reputable service providers. No online system can be guaranteed completely secure.

12. Contact

Privacy questions: privacy@attractionreport.com.