Privacy & Cookies

This notice explains how Reflect Together collects, uses, stores and protects your personal data, and how we use cookies and similar technologies. It also sets out your rights under UK data protection law.

1. Who we are

Reflect Together is owned and operated by Antonios Georgiadis, a freelancer based in England, United Kingdom. For data protection law, Antonios Georgiadis is the data controller of the personal data you provide through this platform.

Contact email: antogeorgiadis@gmail.com

2. What personal data we collect

• Account data: name, email address and authentication details when you sign up (including via Google OAuth).
• Professional profile data: modality, years of experience, qualification level and title, training provider, age groups you work with, client configurations, demographics or communities you focus on, your timezone, availability, and your peer supervision goals.
• Group and membership data: which supervision circles you belong to, join requests you make or approve, and group settings you create or manage.
• Messages: content you send through group chat, including any links or meeting details you share with other members.
• Payment data: we do not store card details. Stripe handles payment processing and shares your payment status and email with us.
• Technical data: IP address, browser type, device information, and cookie identifiers collected automatically for security and analytics.

3. How we use your data

We use your data to:

• Provide the platform, match you with peers and show compatible supervision groups.
• Facilitate group chat, join requests, approvals and member management.
• Process payments and manage membership entitlements.
• Keep the platform secure, prevent abuse and investigate violations of our terms.
• Communicate with you about your account, groups, or platform updates.
• Comply with legal or regulatory obligations.

4. Lawful basis for processing

We rely on different legal grounds depending on the activity:

• Contract: to provide your account, profile, group membership and chat features.
• Consent: where you explicitly agree, for example to optional cookies or particular profile visibility.
• Legitimate interests: to keep the platform safe, prevent fraud and improve our service.
• Legal obligation: where required by law, such as for tax or legal claims.

5. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how people use the platform.

• Essential cookies: required for authentication, security and core platform features. You cannot opt out of these without stopping the service from working.
• Functional cookies: remember preferences such as language or display settings.
• Analytics cookies: help us understand visitor numbers and feature usage. Where used, these are set only with your consent.

You can manage or withdraw consent for non-essential cookies through your browser settings. Essential cookies will remain active while you use the platform.

6. Who we share data with

We do not sell your personal data. We share it only with trusted service providers who help us run the platform:

• Lovable Cloud / Supabase — hosts our database, authentication and real-time services.
• Stripe — processes payments securely.
• Google — provides optional Google sign-in authentication.
• Email providers — may be used to send account or platform-related messages.

Within the platform, your profile and group activity are visible to other members in accordance with the platform design: public profiles are shown to help peers match, and group chat is visible only to members of that circle.

7. International transfers

Some of our service providers may process data outside the United Kingdom. Where this happens, we rely on appropriate safeguards such as UK-approved standard contractual clauses or adequacy decisions to protect your data.

8. Data retention

We keep your personal data for as long as your account is active, plus a reasonable period afterwards to resolve disputes, enforce our terms, or meet legal requirements. When you delete your account, we will delete or anonymise your data unless we are legally required to keep it.

9. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data in certain circumstances.
• Restrict or object to processing.
• Withdraw consent where processing is based on consent.
• Request a copy of your data in a portable format.
• Complain to the Information Commissioner's Office (ICO).

To exercise these rights, contact us at antogeorgiadis@gmail.com. We will respond within one month.

10. Security

We use encryption in transit, access controls, row-level security in the database, and strong authentication to protect your data. No system is ever completely secure, so please choose a strong password and keep your login details safe.

11. Changes to this notice

We may update this notice from time to time. If we make significant changes, we will let you know by email or through a notice on the platform. The current version is always available at this page.

This is a practical privacy notice for a small UK platform. It is not a substitute for legal advice. If you want certainty for your specific practice, please ask a solicitor to review it.