Privacy Policy

Who operates this site

Iris Lee operates Iris The Travel PT as an individual. This policy explains how information is handled on iristhetravelpt.com, including articles, inquiries, resource requests, newsletters, comments, planning tools and digital-product pages.

For privacy questions or requests, use the Contact page. Identify the feature and email address associated with your request, but do not send passwords, payment-card numbers, identity documents, patient information or medical records.

Contact forms and inquiries

The Contact and Work With Iris forms request your first and last name, email address, subject and message. Submissions also include page or referral context and technical fields used to validate and route the request. We use this information to understand and respond to your inquiry.

These forms use WPForms Lite with Lite Connect entry backups enabled. Form entries are backed up remotely on WPForms servers rather than stored as local WPForms entries. Those remote entry backups expire after one year. Contact-form notifications are configured to email the submitted fields. The site’s WordPress email transport uses WP Mail SMTP with Gmail SMTP, so Google also processes those emails. Email copies are separate from the one-year form-backup limit. See WPForms’ Lite Connect information.

General inquiries are not confidential clinical intake or urgent-care channels. Sending a message does not establish a care relationship or subscribe you to the newsletter. Please do not submit sensitive health or patient information.

Free resources and resource-delivery emails

Resource forms request an email address and may allow a first name. The resource-delivery systems retain the submitted details, resource or source identifier and request date in separate WordPress lead records or request tables. Travel Therapy Insider requests also have a separate source and travel-audience tag. Delivery or welcome messages use the site’s email system.

Our policy is to use resource-request email addresses for delivery of the requested resource and messages necessary to fulfill that request, not ongoing promotional emails. Future newsletter updates require a separate, optional Jetpack signup. A newsletter subscription is not required to receive a requested resource, and existing resource-request records are not treated as proof of newsletter consent.

Resource-request records and Jetpack subscriptions are separate. Unsubscribing through Jetpack does not itself remove a resource-request record. To ask about or request removal of a separate resource record, use the Contact page and identify the resource.

Jetpack newsletter and comment subscriptions

Jetpack Newsletter, through Automattic and WordPress.com, manages the site’s newsletter subscriptions. It processes your email address, subscription preferences and technical request information needed to operate the service and help prevent abuse. Newsletter services can also process delivery, opening and link-interaction information. See Automattic’s visitor privacy notice.

Newsletter signup is optional and separate from an inquiry, purchase or resource request. Site updates and comment-follow subscriptions are distinct choices. Jetpack can request email confirmation; an already-confirmed WordPress.com account can follow a different confirmation path. Jetpack newsletter emails provide subscription-management and unsubscribe links. Removing a subscription does not by itself delete other site records or a WordPress.com account.

Newsletter replies are sent privately to the post author’s email, not published as comments. Do not send private, financial, patient or medical information in newsletter replies.

The newsletter is weekly-only. Automatic email delivery for each new post is turned off.

Comments and avatars

Where comments are available, your comment, display name and any supplied website link can be public. The comment settings require a name and email but do not require a registered account. WordPress comment processing can include your IP address and browser user-agent. Do not put sensitive information in comments.

Avatar display is enabled. When an avatar is retrieved from Gravatar, the service receives the request information and an email-derived identifier used by the standard WordPress integration. See Automattic’s privacy policy. The comment-cookie opt-in is enabled: choosing to save commenter details can place cookies in your browser. Blog-follow and comment-follow options are separate from simply posting a comment.

New posts allow comments by default, with automatic closure after 28 days; individual posts can differ. Closing comments does not delete existing comments. Moderation settings do not guarantee manual approval of every comment.

Analytics and technical requests

The site uses Google Analytics through ExactMetrics and Jetpack Stats to understand use of its pages and content. Measurement can include page views, referring pages, browser and device information, interactions, approximate location and identifiers such as cookies. Information placed in page URLs, including search queries, can form part of requests or measurement. Do not enter private information into site search or URLs.

Google states that Analytics processes IP addresses during collection but does not log or store them. That does not mean the site’s hosting, security tools or other providers never process or retain IP addresses. See Google Analytics data safeguards and Jetpack’s privacy information.

Google Analytics currently has granular location/device collection enabled. Google Signals is not enabled, and no Google Ads account is linked to this property. Optional account-level sharing for Google products and services, modeling/business insights, technical support and business recommendations is unchecked. The separate property setting still permits ads-personalization uses; this policy does not describe all advertising-related processing as disabled.

The site uses a consent banner with default-deny blocking for recognized tracking scripts. Google Analytics and Jetpack Stats are held until you allow Statistics. Reject leaves those measurement services off. Use Cookie Preferences to change your choice; withdrawing consent reloads the page to apply the new choice. The consent-preference cookie is configured to last 30 days. Supported third-party embedded content is held until its Marketing category is allowed. This choice does not subscribe you to emails. Blocking covers recognized scripts and configured content providers, not every external resource or technical request. Hosting, delivery and security systems still process technical requests to serve pages, diagnose failures and protect the site.

Cookies and saved browser preferences

The site and its providers use cookies and related browser technologies for functionality, security and measurement. Depending on the feature used, these can include Google Analytics identifiers, payment-service identifiers, subscription or comment preferences, cart or login state, and security or session cookies. Not every visitor receives every cookie.

The Mini Iris companion uses local browser storage for its state and placement. Browser controls let you inspect, restrict or clear cookies and local storage. Clearing storage can reset preferences or affect features; it does not erase records already submitted to a server. Blocking cookies alone does not guarantee that every request or measurement stops. Google’s Analytics safeguards page also explains its browser opt-out add-on, which applies to Google Analytics, not every site service.

Planning tools and feedback

Information handling differs by tool. The Travel Advisor sends destination, dates, party size and type, budget preference, pace, interests and any must-do or constraint text to this site’s server to generate a response. The reviewed implementation generates its response in site code rather than calling an external AI service and does not save the itinerary in that request handler. It uses an IP-derived abuse counter with a one-hour expiry. This is not a one-hour limit for hosting logs, analytics or other records, nor a guarantee that every site tool is device-only or never uses another provider.

The custom feedback system accepts usefulness ratings, reasons and optional comments, together with page or tool context, time and broad viewport category. Its abuse protection processes an IP address and browser user-agent to derive a temporary rate-limit key. A form is not fully anonymous merely because it does not request your name. Please keep feedback free of sensitive personal information.

Educational, study and planning tools are not an invitation to submit patient records or confidential care information. This policy does not replace a separate clinical-product notice or authorize clinical data collection.

Digital products and accounts

The site uses Easy Digital Downloads for digital-product purchases and downloads. Checkout is configured with Stripe, Square and PayPal gateways. Depending on the payment path, contact, billing and transaction details are processed to fulfill the order, communicate about it and provide download access. Enabled billing fields include country, address, city, state or province, postal code, company and phone; their appearance and requirements can vary with the checkout path. Provider notices are available from Stripe, Square and PayPal.

Checkout permits orders without a WordPress user account and is not configured to automatically create a user account for every order. Eligible customers can choose a one-time login link. Account and authentication information is processed when you use those features. Gateway configuration is not a guarantee that every method is available for every order. Do not send payment-card information through the Contact form.

Providers, backups and external content

Providers involved in site operation include Bluehost hosting, Google Analytics and Gmail SMTP, Automattic/Jetpack, WPForms/Lite Connect and the payment services used at checkout. Information can exist in operational records, email systems, remote form-entry backups and website backups, as well as in the website database. Website backup tools currently include local server storage; this does not establish a fixed expiry for every backup or the hosting provider’s separate backup rotation.

Loading an external image, avatar or embedded item contacts its provider, which can receive technical request information. External links lead to services with their own practices. Provider processing can involve locations outside your country. Relevant notices include Automattic, Google, WPForms and Bluehost/Newfold.

Retention and privacy requests

Our retention policy is to keep personal information only as long as needed for its stated purpose and applicable legal, accounting or security needs, and to remove or anonymize information no longer needed. Some records do not expire automatically. There is no single deletion deadline covering every site record, email, provider copy and backup.

Verified system limits differ: WPForms Lite Connect entry backups expire after one year. Google Analytics is configured for 14 months of user and event data, with the user-retention timer reset by new activity; this limit does not govern most aggregated standard reporting. Browser storage can remain until cleared or expired. Backup copies can persist separately from active records.

For access, correction, deletion or other privacy questions, use the Contact page. Identify the relevant feature and associated email address without attaching sensitive identity documents. Available rights and exceptions depend on applicable law; requests may require identity verification. Records needed for legal, security or transaction purposes may need separate treatment.

WordPress export and erasure tools do not establish automatic coverage of every custom lead, feedback or provider record. Current purchase-erasure rules anonymize completed, refunded and revoked orders, delete failed and abandoned orders, and do not automatically act on pending, processing, partially refunded or on-hold orders when that workflow runs. A request does not itself delete every record or backup. Jetpack email-footer controls manage subscriptions separately; independent providers may also have their own request processes.

Children and sensitive information

The site is intended for adults and general students and is not directed to children under 13. If you believe a child under 13 has submitted personal information, use the Contact page to raise the concern without sending additional sensitive details.

Please do not submit patient records, health histories, government identifiers, passwords, financial-account details or children’s personal information through comments, newsletter replies, feedback or general inquiry tools.

Updates to this policy

Updates will be reflected in the effective date above. For questions about this policy or information submitted to the site, contact Iris Lee through the Contact page.