In order for me to provide you with a safe service, I will collect personal information from you when we work together. However, in doing so, I am bound by the General Data Protection Regulations (GDPR) and, for hypnotherapy, the APHP's code of ethics. 


Please discuss any questions you may have about this prior to booking any sessions.


Myrtle Moon Therapies is registered with the ICO.


I am a sole trader and, therefore, both the Data Controller and the Data Protection Officer. My contact details are Allison Agar, email myrtlemoontherapies@gmail.com or phone 07703757178. Please be aware that I will not be able to answer my phone when working with clients, and I do not run an out-of-hours or emergency appointment service. You are welcome to send me a message via email or text and I will get back to you. If you have not had a reply within 7 days, you are welcome to contact me again.


The information that I will collect about you will usually come from you directly via a phone call, email, text message, an online form or face-to-face in one of our sessions. However, if you are under 18, I may require information from your parents, guardians and/or school. If you are referred by someone else, such as your employer, I may also obtain information from them, and there may also be times when I request permission from a healthcare professional, such as your GP, to continue with therapy.



Data Controller 

Myrtle Moon Therapies is the data controller responsible for the personal information collected and processed as described in this Privacy Policy. If you have any questions about how your personal data is used, please contact me using the details provided in this policy.


How will I be using your personal data? 

I will be using your personal data in the following ways:

  • to provide services or products you have purchased, such as audio downloads or readings;
  • to deliver therapy sessions;
  • to reply to you if you contact me with questions about my services;
  • to contact you between sessions if necessary;
  • to allow me to collect payment from you (or the person paying for sessions) and maintain my records and accounts.

You have no legal requirement to share information with me. However, if you choose not to provide information that is necessary for me to deliver a service, I may be unable to provide the therapy, products or services you wish to purchase.

The data I collect for therapy sessions may include your name and contact details, medical history, family situation and support network, employment details, hobbies and interests, lifestyle information, and details of the issue or issues you would like support with. These details are necessary to enable me to provide safe and effective therapy. I may also require your date of birth.

If you have booked a reading, the information I collect may include your name and contact details, place of birth, time of birth and date of birth.

The lawful basis for collecting and processing your personal data may be consent, the performance of a contract or legitimate interests, depending on the nature of our interaction.

You consent to my holding and using your information when you submit an online form, make contact with a query, or return a client form.

Where you purchase goods or services from me, including by making a payment via PayPal or bank transfer, or by agreeing to my Terms and Conditions, I process your information as necessary for the performance of a contract.

If you contact me by email, telephone or social media with an enquiry, it is a legitimate interest of my business to use your contact details in order to respond.

Complaints 

If you believe I have mishandled your personal data or breached UK data protection law, including the UK GDPR or the Data Protection Act 2018, you can make a complaint by contacting me using the details below:

Email: myrtlemoontherapies@gmail.com

Online contact form (available on the Contact page of this website).

Please provide a detailed description of your concern together with your full name and contact details.

I will acknowledge your complaint as soon as reasonably practicable (within 30 days) and investigate the matter promptly. If the investigation takes longer than expected, for example due to technical complexity, I will keep you informed of progress. Once the investigation is complete, I will explain the outcome and any action taken.

If you remain dissatisfied with my response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

Website: Information Commissioner's Office (ICO)

Telephone: 0303 123 1113


Third-Party Services 

I use a number of third-party service providers in the operation of my business, including Google (Gmail), Facebook, Instagram, WhatsApp, Starling Bank and PayPal.

I am usually the only person who has access to your information, unless one of the following applies:

  • you ask me in writing to share your information with someone else;
  • the Duty of Care provision within my Code of Ethics applies;
  • I am working with you as part of a care team, or you have been referred to me by another party (for example, an employer), in which case agreed levels of information may be shared with those relevant parties.

In the event of my temporary or permanent incapacity, responsibility for contacting clients may pass to Martin Agar, my appointed therapeutic executor. In such circumstances, access would be limited to the information necessary to contact clients.

Confidentiality and Supervision 

I belong to a professional body that requires me to keep the information you provide private and confidential unless one of the following applies:

  • there is a legal requirement for me to share information (for example, where a court order or warrant has been issued);
  • there is reasonable cause to believe that failure to disclose information would place you or another person at serious risk of harm (for example, where there are concerns relating to suicide, abuse or serious criminal activity).

These exceptions to confidentiality fall under a provision known as the Duty of Care.

My Code of Ethics also allows me to discuss anonymous case histories for the purposes of supervision, professional development or training. Anonymous means that your personal details are removed or altered so that you cannot be identified.

The Duty of Care provisions cannot be opted out of. However, if you do not wish anonymous information from your sessions to be used for supervision or training purposes, you may notify me by email.

Your Rights

You can ask me to send your information to someone else. I may require your written consent for this.

You can ask me to amend your records if you believe there is an error in them.

In some circumstances, you can ask me to remove your details from my records, and in some circumstances you can request that I stop processing your information.

You can withdraw your permission for me to use your information at any time, although this may mean that I can no longer provide therapy or other services to you.

You can request that any automated processes are completed by a person. If you prefer not to complete online forms, information can usually be collected by telephone or during your first session.

You are entitled to request a copy of the information I hold about you at any time by making a request in writing. Any such request will normally be fulfilled free of charge and within 30 days of receipt.

You can unsubscribe from newsletters and emails and request that I stop sending you direct marketing communications.

If you are under 18, I will need permission from a parent or guardian before working with you. If you are under 13, or if I have reason to believe that you are, I will need to verify your date of birth through a standard ID check.

You can learn more about these rights on https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

 

Cookies

Cookies are small text files that are stored on your computer, phone or other device when you visit a website. They help websites function properly and can improve your browsing experience.

The cookies used on this website do not collect information that directly identifies you as an individual. They may, however, be used to help the website function correctly and to improve the experience of visitors.

Cookies used on this website may include:

  • Essential cookies – These are necessary for the operation and security of the website and enable basic features such as page navigation and access to website functions.
  • Functional cookies – These help improve the usability of the website and may remember preferences or information required for certain website features.

This website is hosted and provided through Site123 and includes a contact form through which visitors may choose to contact me. Any information submitted through the contact form will be handled in accordance with my Privacy Policy.

This website may also contain links to third-party websites and services, including Facebook and Instagram. If you choose to visit these websites, they may place cookies on your device in accordance with their own privacy and cookie policies. As I do not control these third-party cookies, you should consult the relevant policies for further information.

You can manage your cookie preferences through the cookie consent banner displayed when you first visit the website. You may also use your browser settings to block, delete or manage cookies. Please note that disabling certain cookies may affect the functionality of this website.

Further information about cookies and how to manage them can be found at Cookies | ICO

By using this website and selecting your cookie preferences, you acknowledge that cookies may be used in accordance with your chosen settings and this Cookie Policy.

This policy was updated 19th June 2026