Security

• Payments are handled by Stripe, a payment processor certified to PCI DSS Level 1, the highest level of the card industry’s security standard.
• You type your card or bank details into Stripe’s secure form. They go straight to Stripe and never pass through this website or reach me.
• This website checks every payment with Stripe directly before it releases your booking link, so a booking can’t be faked.

• Every page is served over an encrypted connection (HTTPS).
• The website has no customer accounts, passwords or database of personal information that could be stolen.
• It is hosted on Cloudflare, which protects it against attacks and abuse.
• The page editor is limited to me and my web administrator, and signing in needs a one-time code sent by email.

• After payment you receive a private booking link. A first-consultation or follow-up link works once; a package link works for the sessions you bought.
• Please don’t share your booking link.

WhatsApp messages are end-to-end encrypted. Email is convenient but less private, so please share detailed health information in your intake form or during a session rather than by email. Sessions use Google Meet, which encrypts calls in transit. Session recordings are stored privately in my Google account and are never shared without your written permission.

• I will never ask for your card number, bank login or passwords by email, WhatsApp or phone.
• Payments are only made on diegocarlson.com, in the secure checkout. If someone asks you to pay another way, it isn’t me.
• If something looks suspicious, contact me through the details on this website before you pay.

If you notice a security problem with this website, or think your information has been misused, email [email protected]. I’ll look into it promptly and keep you informed.