Privacy Policy

Who is responsible

Roll with Guidance is operated by Daniel Rocha, serving York and Durham Region, Ontario, and online. For any privacy question, correction or complaint, email djrrocha@gmail.com — a real person reads it.

What is collected

Only what a session actually requires:

• When you use the enquiry form: your name, email address, who the game is for, your preferred format, group size, and whatever you write in the message.
• When you book and pay: the session details, and a record that payment was made.
• Standard server logs (IP address, browser, page requested) kept briefly for security and troubleshooting.

What is never collected

Card numbers never touch this website. Payments are handled entirely by Stripe, and only a confirmation that a payment succeeded comes back.

There is no advertising network on this site, no tracking pixel, and no profile is built about you.

Why it is collected

To reply to your enquiry, to schedule and run your sessions, to take deposits and payments, to send booking confirmations and reminders, and to keep basic business records as the law requires.

Your information is not used for anything else without asking you first.

Who it is shared with

Only the services needed to deliver a booking, and only the minimum each one needs:

• Stripe — payment processing.
• Resend — sending booking emails and confirmations.
• The hosting provider running this website and its database.
• Google Calendar — if calendar scheduling is in use, session times are written to the Game Master's own calendar.

Sessions for children and young people

Many games are run for families, classrooms and therapeutic groups. A parent, guardian or the responsible organisation books the session and is the person this policy treats as the customer.

Information about a young person is only collected where a parent, guardian or organisation provides it — for example an accessibility need or a safety consideration to plan around. It is used solely to run that session safely, is never used for marketing, and is deleted when it is no longer needed.

How long it is kept

Enquiries that do not become bookings are deleted once the conversation has clearly ended. Booking and payment records are kept as long as tax and business record-keeping rules require, then deleted. Server logs are short-lived.

Keeping it safe

The site is served over HTTPS, the database is not reachable from the public internet, access is limited to those who operate the site, and backups are encrypted. No system is perfect, and no one can promise otherwise — but if a breach ever affected you, you would be told.

Your rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) you may ask what is held about you, ask for it to be corrected, ask for it to be deleted where there is no legal reason to keep it, and withdraw consent at any time.

Email djrrocha@gmail.com and it will be handled. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Changes to this policy

If this policy changes, the date at the top of the page changes with it. Material changes affecting existing bookings will be sent by email rather than quietly published.