Privacy policy

This GDPR & Data Protection Policy explains how the breath witch collects, uses, stores, and protects client data in compliance with the UK General Data Protection Regulation (UK GDPR).

1. Data Collected

the breath witch collects and processes personal data to provide spiritual coaching, hypnotherapy (past-life & inter-life regression), and intuitive energy healing services. This may include:

  • Name

  • Email address

  • Phone number (if provided)

  • Booking and session details

  • Any information voluntarily shared during sessions (e.g., spiritual experiences, personal insights, or areas of focus)

2. Purpose of Data Collection

Personal data is collected solely for the following purposes:

  • To schedule and manage bookings

  • To communicate regarding sessions and services

  • To provide personalised guidance and follow-up (if applicable)

  • To comply with legal obligations (e.g., tax records for payments)

3. Data Storage & Security

The breath witch takes appropriate security measures to protect client data, including:

  • Secure, password-protected digital storage

  • Encrypted cloud services (where applicable)

  • Restricted access to client data (only the breath witch has access)

Personal data is not shared with third parties unless legally required.

4. Data Retention Policy

Client data is retained for 12 months after the last session unless:

  • The client requests deletion earlier.

  • Retention is necessary for legal compliance (e.g., financial records for tax purposes).

  • The client provides consent for longer retention (e.g., ongoing services).

5. Client Rights Under GDPR

Clients have the following rights regarding their data:

  • Right to Access: Request a copy of stored personal data.

  • Right to Rectification: Request corrections to inaccurate or incomplete data.

  • Right to Erasure (Right to Be Forgotten): Request deletion of personal data.

  • Right to Restrict Processing: Request limited use of their data.

  • Right to Data Portability: Request data transfer to another provider (if applicable).

  • Right to Object: Object to certain data processing practices.

To exercise any of these rights, please contact me. Requests will be processed within 30 days.

6. Use of Third-Party Services

The breath witch may use third-party services for scheduling, payment processing, or communication. These services comply with GDPR and do not use client data for any purposes beyond service delivery.

7. Updates to This Policy

This policy may be updated periodically to reflect legal or operational changes. Clients will be notified of significant updates.

By booking a session, you confirm that you have read and agree to this GDPR & Data Protection Policy.