Legal

Privacy Policy

Last updated: March 2026  |  Data Controller: Riley O'Neill  |  Contact: contact@explorativepsychology.com

1. Introduction

This Privacy Policy describes how Explorative Psychology ("we," "us," or "our"), operated by Riley O'Neill, collects, uses, and protects personal information when you visit https://explorativepsychology.com (the "Website") or submit the contact form.

Explorative Psychology is an educational framework website. We collect minimal personal data and do not offer clinical services, therapy, or any form of psychological treatment.

2. Data Controller

The data controller for personal information collected through this website is:
Riley O'Neill
Email: contact@explorativepsychology.com

For all privacy-related requests - including access, deletion, and objection - please use the email address above.

3. What We Collect

Contact Form Submissions

When you submit the contact form, we collect:

  • Name - as provided by you
  • Email address - as provided by you
  • Subject (optional) - as provided by you
  • Message content - as provided by you
  • Submission timestamp - automatically recorded
  • IP address (hashed) - a one-way cryptographic hash (SHA-256) of your IP address, used solely for spam-rate-limiting. The raw IP address is never stored.

Automatically Collected Technical Data

Cloudflare, Inc. automatically processes network-layer data as part of providing CDN, DDoS protection, and hosting services. This may include IP addresses processed transiently by Cloudflare infrastructure. We do not receive or store raw IP addresses beyond the hashed value described above.

Analytics

This website uses Cloudflare Web Analytics, a privacy-first analytics tool. Cloudflare Web Analytics does not use cookies, does not track individual visitors across sessions, and does not collect personally identifiable information. It provides aggregate traffic data only (e.g., page views, countries). See Cloudflare's Privacy Policy for details.

What We Do NOT Collect

  • We do not use advertising or marketing cookies
  • We do not use cross-site tracking
  • We do not collect payment information (no payments are processed on this site)
  • We do not collect any health or clinical information

4. How We Collect It

  • Contact form - when you voluntarily submit the form on the Contact page
  • Automatic processing - standard server and CDN processing by Cloudflare when you access any page on this website

5. Why We Collect It

We collect personal data for the following purposes and legal bases:

  • To respond to your enquiry - Legal basis: Legitimate interests (GDPR Art. 6(1)(f)) and your consent given by submission.
  • Spam prevention and rate-limiting - Legal basis: Legitimate interests. We store a one-way hash of IP addresses to prevent automated form abuse. This hash cannot be reversed to identify you.
  • Website security and reliability - Legal basis: Legitimate interests. Cloudflare processes network-level data to protect the website from DDoS attacks and malicious traffic.

6. Third-Party Processors

We share data with the following third-party processors under Data Processing Agreements (DPAs):

  • Cloudflare, Inc. - Provides hosting, CDN, DDoS protection, D1 serverless database (contact form storage), and Web Analytics. Contact form data is stored in a Cloudflare D1 database. Cloudflare Privacy Policy →
  • Resend, Inc. - Provides transactional email delivery. Your name, email address, and message are transmitted to Resend to deliver your enquiry to us, and to send you a confirmation email. Resend Privacy Policy →

We do not sell personal data to any third party. We do not share your data with any other parties.

7. Cross-Border Transfers

Cloudflare, Inc. and Resend, Inc. are US-based companies with global infrastructure. Your personal data may be processed in the United States and other countries. Both processors maintain Standard Contractual Clauses (SCCs) with the European Commission and comply with applicable cross-border data transfer requirements.

If you are located in the European Economic Area (EEA) or the United Kingdom, submission of the contact form constitutes your acknowledgement that your data will be transferred to and processed in the United States under the protections described above.

If you are located in Australia, submission of the contact form constitutes your consent to your personal information being disclosed to overseas recipients (APP 8.2 notice), in particular Cloudflare, Inc. and Resend, Inc. in the United States.

8. Retention

Contact form submissions (name, email, subject, message, hashed IP, timestamp) are retained for 12 months from the date of submission, after which they are permanently deleted from the database.

Email correspondence may be retained in the data controller's email account for a reasonable period consistent with normal business record-keeping. You may request deletion at any time.

9. Your Rights Under GDPR / UK GDPR

If you are located in the EEA or the United Kingdom, you have the following rights:

  • Right of access - request a copy of the data we hold about you
  • Right of rectification - request correction of inaccurate data
  • Right to erasure - request deletion of your data ("right to be forgotten")
  • Right to data portability - receive your data in a structured, machine-readable format
  • Right to object - object to processing based on legitimate interests
  • Right to withdraw consent - where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email contact@explorativepsychology.com. We will respond within 30 days. If you believe we have not handled your data correctly, you have the right to lodge a complaint with a supervisory authority.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the CCPA:

  • Right to know - request disclosure of the personal information we have collected about you
  • Right to delete - request deletion of your personal information
  • Right to opt out of the sale of personal information - we do not sell personal information to any third party

To exercise these rights, email contact@explorativepsychology.com.

11. Australian Privacy Act 1988 - APP Notice

If you are located in Australia, this notice is provided in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Collection: Personal information (name, email, message, hashed IP, timestamp) is collected when you voluntarily submit the contact form. Collection is reasonably necessary for responding to your enquiry.

Overseas disclosure: Your personal information will be disclosed to overseas recipients (Cloudflare, Inc. and Resend, Inc. in the United States) - see Section 7. By submitting the form, you consent to this overseas disclosure under APP 8.2.

Access and correction: You may request access to or correction of personal information held about you by emailing contact@explorativepsychology.com.

Complaints: If you believe your privacy has been interfered with, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Cookies

This website uses minimal cookies. Specifically:

  • Cloudflare essential security cookies - Cloudflare may set cookies (such as __cf_bm) for bot detection and security. These are strictly necessary and do not track users for marketing purposes.
  • Cloudflare Web Analytics - does not set any cookies or use any persistent identifiers.

We do not use analytics cookies, marketing cookies, advertising cookies, or any cross-site tracking cookies. No cookie consent banner is displayed because no non-essential cookies are set.

13. Children and Minors

This website is not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us at contact@explorativepsychology.com and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the website following any update constitutes acceptance of the revised policy.

15. Contact

For any privacy-related questions or requests:

Riley O'Neill
Email: contact@explorativepsychology.com