This page explains what happens to your information when you use riseflowheal.com, and when you contact or visit Rise Flow Heal.
It is written to be read rather than to be legally impressive. If anything here is unclear, ask us and we will answer plainly.
Who we are. Rise Flow Heal, 26 Gergi Zeidan Street, Tabaris, Beirut, Lebanon. You can reach us at riseflowheal@gmail.com.
The short version
- This website has no accounts, no forms and no shopping basket. It does not ask you for anything.
- The only tracking is Google Analytics, and it does not run at all unless you agree to it.
- If you message us to book, we keep that conversation, including anything you tell us about your health.
- We do not sell your information, and we do not send marketing emails.
What the website collects
Nothing, unless you agree to it
The site sets no analytics or advertising cookies until you choose Accept on the banner. Before that, and permanently if you choose Decline, Google Analytics is loaded in a state where it cannot store anything on your device.
If you accept, Google Analytics 4 (property G-PE2LDQHS89) sets two cookies, _ga and _ga_PE2LDQHS89, which last up to two years. They tell us how many people visit, which pages they read, roughly which country they came from, and whether they arrived from Google or elsewhere. We use this to work out which articles are worth writing more of.
We cannot identify you from it, and we have not enabled any advertising or cross-site features in it.
If you decline, no analytics cookies are set at all.
One thing we store either way
Your answer to the banner is saved in your browser under rfh-analytics-consent, so we do not ask again on every page. It is not a cookie and it is never sent to us or to anyone else. It is the only way to remember that you said no.
Changing your mind
Clearing your browser's site data for riseflowheal.com will bring the banner back and let you answer again. You can also block cookies for this site in your browser settings, or install Google's opt-out add-on at tools.google.com/dlpage/gaoptout.
Server logs
Our host, Netlify, records requests to the site, including IP addresses, as any web server does. This is a normal part of running a website securely and we do not use those logs for analytics.
Links that leave the site
Buttons for WhatsApp, Instagram and Facebook are ordinary links. Nothing is shared with those companies until you click, at which point their own privacy policies apply, not ours. The same is true of the Google Maps link.
What we collect when you contact us
Most people book through WhatsApp, Instagram or email. When you do:
We receive what you send - your name, your phone number or handle, and whatever you write.
We keep the conversation. Message history stays in the account it arrived in, and we use it to arrange your session and to recognise you when you come back.
Those services see it too. WhatsApp and Instagram are Meta products, Gmail is Google's. Your messages sit on their systems under their terms, not ours. If you would rather not use them, telephone or come in.
Health information, which we take seriously
This is the part of this policy that matters most.
We ask about injuries, pregnancy, surgery, medication and how you are feeling, because a practitioner who does not know cannot work safely. Our articles encourage you to tell us. So we need to be straight about what happens to it.
We only ask for what affects the session. Not a medical history.
It is used only to deliver your session safely - to choose pressure, to avoid a contraindicated technique, to adapt a class.
It is shared only with the practitioner treating you, and with nobody outside the studio. Not with insurers, not with anyone advertising anything.
You can decline to answer. We may then decline a particular treatment, which is us being careful rather than difficult.
You can ask us to delete it at any time, and we will.
Where the law treats health information as a special category requiring your explicit consent, telling us is that consent, and it is given for this purpose alone.
Testimonials
The quotes on our testimonials page were sent to us by the people named, and are published with permission, in their own words. If you are one of them and would like yours removed or your name changed, email us and it will be done - no reason needed and no discussion.
The browser editor
/admin is a writing tool for the studio, not a page for visitors. It loads software from the unpkg.com service and signs in against GitHub. It sets nothing on an ordinary visitor's device because ordinary visitors never load it, and it is excluded from search engines.
Who else handles your information
| Who | What for | Where |
|---|---|---|
| Netlify | Hosting the website | United States |
| Analytics, if you accept | United States and elsewhere | |
| Meta (WhatsApp, Instagram) | Messages you send us | Outside Lebanon |
| Google (Gmail) | Email you send us | Outside Lebanon |
Lebanon's Law No. 81 of 2018 permits personal data to be sent abroad where the recipient offers adequate protection, appropriate safeguards apply, or you have consented. Every service above is a mainstream provider operating under published data protection terms, and where we can choose a setting that keeps data in the EU rather than the United States, we do.
How long we keep things
Analytics: up to 14 months in Google Analytics, then deleted automatically. The cookies themselves last up to two years unless you clear them.
Messages and booking notes: while you are a client and for a reasonable period afterwards, so that we recognise you when you return. Ask and we will delete them sooner.
Health notes: only as long as needed for your care. Deleted on request.
Testimonials: until you ask us to remove yours.
Your rights
You may ask us to:
- tell you what we hold about you
- correct anything wrong
- delete what we hold - and where we hold something we are obliged to keep, we will tell you which and why
- stop using your information for a particular purpose
- withdraw a consent you have given, at any time, including for analytics
Email riseflowheal@gmail.com and we will reply within 30 days. There is no charge. We may ask you to confirm who you are before we send personal information anywhere.
If you are unhappy with how we have handled a request, tell us first - we would rather fix it. You also have the right to complain to the relevant authority in your country.
Children
The site is not aimed at children, and we do not knowingly collect information about anyone under 18 through it. Under-18s are welcome at the studio with a parent or guardian's consent, arranged in person.
Security
The site is served over HTTPS. It holds no database and no accounts, which removes most of what there is to break into. Messages and notes are held in accounts protected by strong passwords and two-factor authentication.
No system is perfectly secure, and we would rather say so than claim otherwise.
Which law applies
We are based in Beirut and operate under Lebanese law, including Law No. 81 of 2018 on Electronic Transactions and Personal Data.
Many of our clients live in or come from Europe. Where the General Data Protection Regulation applies to what we do, we intend to meet it, and the practices described above are written with it in mind - consent before analytics, a stated purpose for each thing we hold, and the right to have it deleted.
Changes
If we change this policy we will change the date at the top. Anything that materially affects what we do with your information will be flagged on the site rather than slipped in quietly.
Last updated 7 September 2026.