Privacy Policy

What this page covers

This privacy policy explains how Tracey Halliday handles the personal information you submit through the callback request form on this website.

Who is the data controller

Tracey Halliday is the data controller for the personal information you submit through this website. Tracey is responsible for deciding how and why your information is used.

What information the form collects

When you complete the callback request form, the following information is collected:

• Name (required), so Tracey knows who to ask for when she calls
• Telephone number (required), so Tracey can call you back
• Email address (required), so Tracey can respond by email if appropriate, follow up on your callback request, and maintain continuity regarding your original enquiry
• Preferred callback time (optional), so Tracey can try to call at a convenient time

In addition, the form automatically captures certain technical data that helps identify how you found the website. This may include:

• The URL you landed on
• The referring page (if any)
• Google Click ID (gclid), used by Google Ads to attribute your visit
• UTM parameters (source, medium, campaign, term, content), marketing attribution data

This technical data is stored in your browser's session storage during your visit and included with your form submission. It is used only to help Tracey understand how visitors find the website.

Lawful basis for processing

The lawful basis for processing your personal data is legitimate interest (Article 6(1)(f) of the GDPR). Tracey has a legitimate interest in responding to your enquiry and contacting you about hypnotherapy services you have expressed an interest in. Your data is processed only for the purpose of responding to your callback request.

How your information is used

The information you submit through the form is used solely to respond to your enquiry. Tracey will use it to call you back and discuss whether her approach may be suitable for you. Your email address also allows Tracey to respond by email if appropriate, follow up on your callback request, and maintain continuity regarding your original enquiry.

How your information is delivered and processed

When you submit the callback form, your details are sent from the server to Tracey via AgentMail, an email delivery service provided by AgentMail, Inc. Your information is transmitted over an encrypted (HTTPS) connection and delivered to Tracey's email inbox.

AgentMail acts as a service provider processing data on Tracey's behalf to deliver the email. Your personal information is shared with AgentMail only to the extent necessary to process and deliver your enquiry. AgentMail processes email metadata and content solely on behalf of customers according to customer instructions and does not access or use email content except as necessary to provide the service.

AgentMail states that data is encrypted in transit and at rest, with isolated storage per customer. AgentMail is a US-based service, so your data is transferred to and processed in the United States. AgentMail states that it takes steps to ensure data is treated securely and that adequate controls are in place for international transfers.

For more information about how AgentMail handles data, see the AgentMail Privacy Policy.

Confidentiality of your enquiry

Once Tracey receives your callback request, your information is treated as confidential. The only exceptions are where Tracey needs support from her clinical supervisor, or where there is reason to believe someone is at risk of serious harm. Nothing is shared with other health or social care professionals without your written consent.

How long your information is retained

Tracey retains enquiry information for as long as is necessary to respond to your request and for reasonable follow-up. If you become a client, your records are stored digitally in encrypted files. If you do not proceed, your enquiry details are retained for a reasonable period and then deleted.

AgentMail retains email messages, drafts, attachments, and inbox records until the account holder deletes them. AgentMail's database point-in-time recovery provides recovery points for up to 35 days. Application, security, and diagnostic logs may be retained for up to 365 days.

Your rights

Under the GDPR you have the right to request access to your personal data, request correction or deletion, restrict processing, object to certain processing, and request data portability. To exercise any of these rights, please contact Tracey directly.

How to contact Tracey about your personal information

If you have any questions about how your personal information is handled, or if you would like to request access, correction, or deletion of your data, you can contact Tracey by:

• Telephone: 07512 966726
• Email: traceyhypnotherapy77@gmail.com

Session storage use

This website does not use tracking cookies. The callback form uses your browser's session storage to temporarily hold marketing attribution parameters (such as gclid and UTM values) between page views during your visit. This session storage is cleared automatically when you close your browser tab. No persistent cookies or local storage are set.

Crisis support

If you need urgent support, please contact a GP, call NHS 111 for medical advice, or in an emergency call 999. The Samaritans are available 24 hours a day on 116 123 (free to call).