Legal

Privacy Policy

Last updated: 29 March 2026

1. Who We Are

IntuitiveMind is a clinical hypnotherapy and energy healing practice operated by Clare Hillier, based in Witney, Oxfordshire. Our website address is: https://intuitive-mind.co.uk. For any privacy-related queries, please contact us at clare@intuitive-mind.co.uk.

2. What Data We Collect

We may collect and process the following personal data:

• Contact information: name, email address, phone number — provided when you submit a booking request or contact form
• Session preferences: preferred days, times, and session type — provided when you request a booking
• Health-related information: any details you voluntarily share about the concerns you wish to address — provided during booking requests or consultations
• Technical data: IP address, browser type, pages visited — collected automatically via cookies and server logs
• Communication records: emails and messages exchanged between you and IntuitiveMind

3. Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process your personal data on the following lawful bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g. submitting a booking request)
• Contract: Processing is necessary for the performance of a contract with you (e.g. providing hypnotherapy or healing sessions)
• Legitimate interests: Processing is necessary for our legitimate interests, such as responding to enquiries and improving our services, provided these interests do not override your rights

Where we process special category data (health-related information), we do so on the basis of your explicit consent, which you may withdraw at any time.

4. How We Use Your Data

We use your personal data to:

• Respond to your enquiries and booking requests
• Arrange and provide clinical hypnotherapy and energy healing sessions
• Maintain clinical records as required by our professional body
• Send appointment confirmations and reminders
• Improve our website and services
• Comply with legal and regulatory obligations

We will never sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Sharing

We may share your data with:

• Website hosting providers: who store data on secure UK/EEA-based servers
• Email service providers: for the purpose of responding to your enquiries
• Professional supervisors: anonymised case details may be discussed as part of clinical supervision, as required by our professional body

We will never transfer your data outside the UK/EEA without adequate safeguards in place and your informed consent.

6. Data Retention

We retain your personal data only for as long as necessary:

• Enquiry data: deleted within 12 months if no booking is made
• Client session records: retained for 7 years after your last session, in line with professional body requirements and insurance obligations
• Financial records: retained for 6 years as required by HMRC

7. Your Rights

Under the UK GDPR, you have the following rights:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your data where there is no compelling reason for its continued processing
• Right to restrict processing: request that we limit how we use your data
• Right to data portability: request your data in a structured, commonly used format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact clare@intuitive-mind.co.uk. We will respond within one calendar month.

8. Cookies

Our website uses cookies to ensure its proper functioning. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures including encrypted connections (SSL/TLS), secure hosting, access controls, and regular review of our data processing practices.

10. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.