Privacy notice · provisional
Your story is not a product.
This notice explains the minimum information Just Listen needs while the founding service is being prepared. It will be reviewed before paid sessions open.
Who is responsible
Just Listen is currently operated publicly under the name Elia Sal. No private home address or legal name is displayed on this website. A formal service address and complete controller details will be added privately where law requires them before commercial launch.
A separate data boundary
Client interest, listener applications and safety reports submitted on this domain are stored for Just Listen. They are not added to a LifeCoach.ltd account, Quiet Room membership or Mia conversation.
What we collect
Founding client forms collect your name, email, broad support preference, preferred timing and any access needs you choose to share. Listener applications collect a display name, private email and written answers. Safety reports collect what you submit and an email only if you want a reply.
How submissions are reviewed
Submitted forms appear in a restricted moderation workspace available only to authorised Just Listen staff. The workspace records workflow status, assignment and private review notes. When operational email alerts are enabled, the information you submit is also sent through the contracted transactional email provider to a private authorised mailbox so a new form is not missed. Public pages and search engines cannot access that workspace or mailbox.
Form security
Cloudflare Turnstile checks that a form is being sent by a person. The server also keeps a short-lived, one-way identifier derived from connection information to limit automated form floods. The raw address is not stored in the form database, the rate-limit record expires after the short abuse-prevention window, and neither measure is used for advertising or profiling.
Session-room data
A private room stores only hashed access tokens, its start/end state and text entered by either participant. The audio itself passes between the two browsers using encrypted WebRTC and is not recorded or transcribed. Short-lived connection signals are deleted after the room expires. Demo rooms last 45 minutes, are automatically removed, and must not be used for real personal, health or safeguarding information.
Why we use it
We use this information to respond to your request, assess listener suitability, plan safe access, prevent misuse and meet legal or safeguarding duties. We do not sell personal information or use wellbeing conversations for advertising.
Sensitive details
Do not put medical records, identity documents, financial information or details about another identifiable person into founding or demo forms. The final paid-session retention and access schedule must be legally approved before commercial booking opens.
Sharing and storage
Website records and the human-check service are provided by Cloudflare. Form alerts use a transactional email processor only when configured. Payment and identity information will be handled by Stripe when those services open. Information is shared only where needed to run the service, protect someone from serious harm, investigate abuse or comply with law.
Your choices
You can ask for access, correction or deletion through the website reporting route. Some records may need to be retained for safety, dispute or legal reasons. There are no advertising cookies on this founding version.
Before commercial launch
A complete UK GDPR notice, retention schedule, processor list, lawful-basis record, children’s access assessment and data-protection impact assessment must be finalised before paid sessions begin.