This privacy policy sets out how Stella Tomlinson Hypnotherapy uses and protects any information that you give Stella Tomlinson Hypnotherapy when you use this website.

Last updated: June 2026

Stella Tomlinson ("I", "me", "my", trading as Stella Tomlinson Hypnotherapy) is committed to protecting your privacy and handling your personal information responsibly and in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains what information I collect through this website, how it is used, how it is stored, and your rights regarding your personal information.

Who I Am

Stella Tomlinson is the Data Controller responsible for the personal information collected through this website and in connection with enquiries about hypnotherapy services.

If you have any questions about this Privacy Policy or how your information is handled, please contact:

Email: stella@stellatomlinson.com

Information Collected Automatically

This website is hosted by Squarespace.

When you visit this website, certain information may be collected automatically, including:

• IP address

• Browser type and version

• Device information

• Pages viewed

• Referring website information

• Dates and times of visits

• General website usage information

This information helps maintain website security, improve performance, and understand how visitors use the site.

Cookies and Analytics

This website uses cookies and similar technologies.

Necessary cookies are required for the website to function and cannot be switched off.

Analytics cookies are only used where you have provided consent through the website cookie banner. These cookies help me understand how visitors use the website so that I can improve its performance and content.

You can manage your cookie preferences through the cookie settings available on this website.

Contact Forms and Enquiries

If you contact me through this website, book an initial consultation, or complete an enquiry form, I may collect:

• Name

• Email address

• Telephone number

• Information you choose to share about the support you are seeking

This information is used solely to respond to your enquiry and discuss whether hypnotherapy may be appropriate for your needs.

Booking Appointments

I use Calendly to manage appointment bookings.

When you book an appointment, Calendly may collect information including:

• Name

• Email address

• Telephone number

• Appointment preferences

• Information you voluntarily provide regarding your enquiry

Calendly processes this information on my behalf in accordance with its own privacy practices.

Payments

Payments may be processed securely through Stripe.

Payment card details are processed directly by Stripe and are not stored by me.

Health Information

If you choose to become a client, additional information may be collected as part of providing hypnotherapy services, including health and wellbeing information.

This information is treated as confidential and is covered in more detail within the Client Privacy Notice provided before therapy begins.

The Client Privacy Notice explains how therapy records, health information, confidentiality and data retention are managed.

Lawful Basis for Processing

Depending on the circumstances, personal information is processed under one or more of the following lawful bases:

• Legitimate interests (responding to enquiries and operating the website)

• Contractual necessity (providing requested services)

• Legal obligations (financial and business record-keeping)

• Consent (for optional marketing communications and non-essential cookies)

Where health-related information is processed in connection with therapy services, additional protections apply under UK GDPR.

Sharing Information

Your information may be shared with carefully selected service providers who support the operation of my practice, including:

• Squarespace (website hosting)

• Calendly (appointment scheduling)

• Stripe (payment processing)

• Google Workspace (secure business email and record storage)

• Google Analytics (website analytics, where consent has been provided)

These providers process information only as necessary to provide their services and are required to maintain appropriate security measures.

Information will not otherwise be shared unless:

• You have provided consent;

• Disclosure is required by law; or

• Disclosure is necessary to protect someone's safety.

Data Retention

Enquiry information is retained only for as long as reasonably necessary to respond to enquiries and manage business records.

If you become a client, information relating to therapy services will be retained in accordance with professional, insurance, legal and regulatory requirements, as explained in the Client Privacy Notice.

Your Rights

Under UK GDPR, you have rights including:

• The right to access your personal information

• The right to correct inaccurate information

• The right to request erasure in certain circumstances

• The right to restrict processing in certain circumstances

• The right to object to certain types of processing

• The right to data portability where applicable

• The right to withdraw consent where consent is relied upon

To exercise any of these rights, please contact me using the details above.

Complaints: How to Raise a Data Protection Concern

I take your privacy seriously. If you have any questions or concerns about how I handle your personal data, please contact me directly so I can investigate and resolve the issue for you.

• How to contact me: You can email me at stella@stellatomlinson.com. Please clearly state that your query relates to a data protection concern.

• What happens next: I will formally acknowledge your complaint within 30 days of receiving it. I will investigate your concern thoroughly and without delay, keeping you updated on my progress.

• The outcome: Once my investigation is complete, I will write back to you to explain my findings and any steps I have taken to put things right.

Under the Data (Use and Access) Act 2025, you are required to try to resolve data concerns with me first.

However, if you are unhappy with my final response, or if I fail to respond to you, you have the right to log a complaint with the UK regulator via the ICO Complaints Portal.

Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements, business practices, or website functionality.

The most recent version will always be available on this website.

—

Stella Tomlinson Hypnotherapy is registered with the Information Commissioner's Office (ICO) as a data controller. Registration number: ZC144765.