Last Updated: [31st May 2025]

1. Introduction

Body-Aligned Mind is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services, website, or communicate with us.

2. Data Controller

Laura Macready is the Data Controller for Body-Aligned Mind. Our ICO registration number is ZB880432.

3. Information We Collect

We may collect and process the following types of personal information:

• Personal Details: Name, date of birth, contact information (email, phone number, address).

• Health Information: Relevant details about your mental health, medical history, and therapeutic progress.

• Session Records: Notes taken during therapy sessions for reference and professional purposes.

• Payment Information: Transaction details for booking and payment processing (no card details are stored by us).

4. How We Use Your Information

We collect your data for the following purposes:

• To provide hypnotherapy and psychotherapy services tailored to your needs.

• To maintain session records for continuity of care, insurance, and professional supervision.

• To process bookings and payments for services.

• To comply with legal and regulatory obligations.

5. Data Storage and Security

• Client records are stored securely on a password-protected computer and in encrypted, password-protected files.

• All documents are stored using 2-factor authentication on a secure cloud platform.

·       Any paper notes will either be securely digitized and stored electronically (as above) and then destroyed or locked in a filing cabinet, stored behind a locked door - in line with GDPR regulations.

• Written records are retained for 8 years after the last interaction with adult clients. For clients under 18, records are kept until they turn 25 years old (or 26 for 17-18-year-olds).

6. Confidentiality and Sharing of Information

• Your sessions are confidential, with the following exceptions: 

• If required by law (e.g., safeguarding concerns).

• If there is a risk of harm to yourself or others.

• If professional supervision is required (your identity remains protected).

• We will never share your information with third parties without your written consent.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access: You can request a copy of the information we hold about you.

• Correction: You can ask us to update or correct any inaccurate data.

• Erasure: You can request deletion of your data unless legal/insurance obligations require us to retain it.

• Restriction: You can ask us to limit how we use your data.

• Objection: You can object to certain processing activities.

Requests will be processed within 30 days in line with GDPR regulations.

8. Payment and Cancellation Policy

• Payments must be made at least 48 hours in advance of a session.

• Cancellations made within the required notice period will be refunded in full.

• Deposits for certain services (e.g., smoking cessation) are non-refundable if a cancellation occurs.

9. External Links and Third Parties

Our website may contain links to third-party sites.  We are not responsible for their privacy practices, so we encourage you to review their policies separately.

10. Updates to This Privacy Policy

We may update this policy periodically.  Any changes will be posted on our website with the latest update date at the top.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Laura@bodyalignedmind.com