Privacy Policy

Who we are

Hajra Khan Wellbeing provides professional hypnotherapy and wellbeing services to adult clients. For data protection purposes, Hajra Khan Wellbeing is the organisation responsible for deciding how and why your personal information is used.

Email: info@hajrakhanwellbeing.com
Telephone: 07549 516494
Website: hajrakhanwellbeing.com

Information we collect

Depending on how you contact us or use our services, we may collect:

• Your name, email address and telephone number.
• The service you are interested in and your preferred contact method.
• Enquiry, appointment and communication details.
• Information you choose to include in a message or form.
• Consent records, including the date and version of the policy accepted.
• Technical information such as IP address, browser type and website activity where necessary for security or analytics.
• Payment references and payment status when online payment services are introduced.

How we use your information

• To respond to enquiries and contact you about your request.
• To assess whether a service may be suitable before an appointment is arranged.
• To arrange, manage, confirm, reschedule or cancel appointments.
• To provide agreed services and communicate with you about them.
• To maintain appropriate business, financial and professional records.
• To protect the website, prevent misuse and investigate security incidents.
• To meet legal, regulatory, safeguarding or insurance obligations where applicable.

Our lawful bases

Depending on the circumstances, we may rely on one or more of the following lawful bases:

• Taking steps at your request before entering into a contract, such as responding to an enquiry or discussing an appointment.
• Performance of a contract, where information is needed to provide a service you have booked.
• Legitimate interests, such as managing the practice, maintaining security and responding appropriately to communications.
• Legal obligation, where records must be retained or disclosed by law.
• Consent, where we specifically ask for permission and consent is the appropriate basis.

Sensitive and health-related information

Information about physical or mental health may be treated as special category data and receives additional legal protection. We aim not to collect detailed health or therapy information through the general website enquiry form.

If you later proceed with a service, Hajra may need to collect relevant health, background, safeguarding or suitability information through appropriate forms or professional discussions. This information will only be used where necessary and handled with additional care.

Who we may share information with

We may use trusted providers to support the operation of the practice, including:

• Website hosting, maintenance and security providers.
• Email and communication service providers.
• Booking, payment and accounting providers where used.
• Professional advisers, insurers or regulators where reasonably required.
• Emergency, safeguarding or legal authorities where disclosure is necessary or legally required.

Providers should receive only the information needed to perform their service and are expected to handle it securely and lawfully.

Payments

Online payment facilities are not currently active. If they are introduced later, payments are expected to be processed securely by a specialist payment provider such as Stripe.

Hajra Khan Wellbeing will not store full card numbers, security codes or card expiry details on this website. The payment provider will process those details under its own privacy and security arrangements.

Keeping your information safe

Reasonable technical and organisational safeguards are used, which may include:

• Encrypted website connections using HTTPS.
• Password-protected and access-controlled administration areas.
• Restricted access to customer and appointment information.
• Software updates, backups and security monitoring.
• Use of reputable hosting and service providers.

No internet-based system can promise absolute security. If a serious personal data breach occurs, it will be assessed and handled in accordance with applicable law.

How long we keep information

Information is retained only for as long as reasonably necessary for the purpose for which it was collected, including the management of enquiries and appointments, professional record-keeping, legal requirements, insurance and dispute resolution.

Retention periods may differ depending on the type of information and whether you become a client. Information that is no longer needed will be securely deleted, anonymised or archived in line with the practice's retention arrangements.

Cookies and website analytics

The website may use essential cookies needed for security, forms and basic website operation. Optional analytics or similar technologies should only be used in line with the website's cookie choices and Cookie Policy.

You can also control or delete cookies through your browser settings, although some website features may not work correctly without essential cookies.

Your data protection rights

Your rights may include the right to:

These rights are not absolute and may depend on the circumstances and lawful basis. Identity may need to be verified before a request is completed.

Changes to this policy

This Privacy Policy may be updated when services, systems or legal requirements change. The latest version will be published on this page with an updated date.