Privacy Policy

Last updated: 21/6/25

  1. Data Controller

This website is operated by:

Barbara Zironi
Website: www.barbarazironi.com
Email: hello@barbarazironi.com
Location: United Kingdom

For the purposes of UK data protection law, the Data Controller is Barbara Zironi.

  1. Overview

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected when you use this website or engage our services. It also explains your rights under UK GDPR. 

When you provide with your personal details they are processed and stored for these reasons: 

  • I collect personal information about you, as well as background information, psychological health and lifestyle, I do this in order to provided you with the best possible therapy treatment. By you requesting sessions and my agreement to provide the sessions constitutes a contract. 
  • I have a ‘legitimate interest’ in collecting this information as I would not be able to do my job effectively or safely without this information. You can of course refuse to provide this information, but if you were to do this, I would not be able to provide the therapy treatment. 
  • It is also important that I can contact you in order to confirm your appointments and also providing you with any information as part of your therapy and any matter connected to your therapy. This again constitutes a ‘legitimate interest’. 

I may collect and process the following data about you: 

You may provide me with personal data when completing the contact form, emails and via telephone. As well as when I provide you with an electronic intake form via email for completion or when we complete a paper intake form in conjunction with you during your therapy consultation. Personal data such as your name, address, age, gender and contact details, as well as relevant medical history and background information related to your therapy. 

 

  1. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information you provide

  • Name 
  • Email address 
  • Postal address (where relevant) 
  • Telephone number 
  • Age and gender (where relevant) 
  • Booking and appointment details 
  • Messages sent via forms or email 
  • Intake or consultation information 

3.2 Sensitive (Special Category) Data

Where necessary for hypnotherapy or coaching services, you may provide sensitive information such as:

  • Physical or mental health information 
  • Fertility or reproductive information 
  • Medical history relevant to services 
  • Lifestyle or personal circumstances 

This data is processed only when necessary to provide services and, where required, with your explicit consent.

3.3 Technical Data

  • IP address 
  • Browser and device information 
  • Website usage data 
  • Cookie and analytics data (where applicable) 
  1. How We Use Your Data

Personal data is used to:

  • Respond to enquiries 
  • Manage appointments and bookings 
  • Deliver hypnotherapy and coaching services 
  • Maintain client records 
  • Communicate about sessions 
  • Improve services and website performance 
  • Meet legal, regulatory, or professional obligations 

Without certain information, services may not be deliverable.

  1. Lawful Bases for Processing

We process personal data under the following lawful bases:

  • Contract: to provide requested services 
  • Legitimate interests: administration, communication, and service management 
  • Consent: for sensitive data or where explicitly required 
  • Legal obligation: where required by law or professional standards 
  1. Data Storage and Security

6.1 Electronic records

Electronic information is safely and securely stored, with third party service provider, Google Workspace. Access to this data is accessible only by me and is password protected, passwords are changed regularly and known only by me.

6.2 Paper records

Handwritten client therapy notes are securely stored in a locked fire proof filing cabinet, only I have access to this information. They are destroyed by shredding, once the legal minimum of time has elapsed. 

  1. Data Retention

Client records are retained up to 8 years after final session (unless legally required longer) 

After this, data is securely deleted or destroyed.

  1. Third-Party Service Providers & International Transfers

We use third-party providers to operate our services, including:

  • Spacemail (Email services) 
  • …………(Website hosting) 
  • Google calendar (Appointment scheduling systems) 
  • ………..(Secure storage providers) 
  • Paypal (Payment processor) 

These providers act as data processors and only process data on our instructions.

Some providers may process data outside the United Kingdom. Where this occurs, appropriate safeguards are applied in accordance with UK GDPR, such as adequacy regulations or approved transfer mechanisms to ensure equivalent data protection standards.

  1. Payments

Payments may be processed via third-party payment providers such as PayPal, which is structured to comply with UK GDPR

If you have any concerns about your data, you should check the Privacy Policy for Paypal  here: https://www.paypal.com/uk/legalhub/paypal/privacy-full

We do not store payment card or financial details. Payment providers process data under their own privacy policies.

  1. Data Sharing

Personal data is not sold or shared for marketing purposes.

Data may be shared only:

  • With your consent 
  • To deliver requested services 
  • To comply with legal obligations 
  • In response to lawful requests from authorities 
  • To protect vital interests or legal rights 
  1. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data 
  • Rectify inaccurate data 
  • Request erasure (where applicable) 
  • Restrict processing 
  • Object to processing 
  • Withdraw consent (where applicable) 
  • Data portability (where applicable) 

Requests can be made at:
hello@barbarazironi.com

You also have the right to complain to the UK Information Commissioner’s Office (ICO).

  1. Cookies

Cookies may be used for:

  • Essential website functionality 
  • Performance and analytics 
  • User experience improvements 
  • Optional marketing or tracking (where enabled) 

Non-essential cookies are only used with consent where required.

  1. Changes to This Policy

This policy may be updated periodically. The latest version will always be available on this website.

  1. Contact

For any questions about this Privacy Policy or your personal data, contact:

Barbara Zironi
Email: hello@barbarazironi.com

Loading...