Privacy Policy

What this page covers

This privacy policy explains how Tracey Halliday handles the personal information you submit through the callback request form on this website.

Who is the data controller

Tracey Halliday is the data controller for the personal information you submit through this website. Tracey is responsible for deciding how and why your information is used.

What information the form collects

When you complete the callback request form, the following information is collected:

• Name (required), so Tracey knows who to ask for when she calls
• Telephone number (required), so Tracey can call you back
• Email address (required), so Tracey can respond by email if appropriate, follow up on your callback request, and maintain continuity regarding your original enquiry
• Preferred callback time (optional), so Tracey can try to call at a convenient time

In addition, the form automatically captures certain technical data that helps identify how you found the website. This may include:

• The URL you landed on
• The referring page (if any)
• Google Click ID (gclid), used by Google Ads to attribute your visit
• UTM parameters (source, medium, campaign, term, content), marketing attribution data

This technical data is stored in your browser's session storage during your visit and included with your form submission. It is used only to help Tracey understand how visitors find the website.

Lawful basis for processing

The lawful basis for processing your personal data is legitimate interest (Article 6(1)(f) of the GDPR). Tracey has a legitimate interest in responding to your enquiry and contacting you about hypnotherapy services you have expressed an interest in. Your data is processed only for the purpose of responding to your callback request.

How your information is used

The information you submit through the form is used solely to respond to your enquiry. Tracey will use it to call you back and discuss whether her approach may be suitable for you. Your email address also allows Tracey to respond by email if appropriate, follow up on your callback request, and maintain continuity regarding your original enquiry.

How your information is delivered and processed

When you submit the callback form, your details are sent from the server to Tracey via AgentMail, an email delivery service provided by AgentMail, Inc. Your information is transmitted over an encrypted (HTTPS) connection and delivered to Tracey's email inbox.

AgentMail acts as a service provider processing data on Tracey's behalf to deliver the email. Your personal information is shared with AgentMail only to the extent necessary to process and deliver your enquiry. AgentMail processes email metadata and content solely on behalf of customers according to customer instructions and does not access or use email content except as necessary to provide the service.

AgentMail states that data is encrypted in transit and at rest, with isolated storage per customer. AgentMail is a US-based service, so your data is transferred to and processed in the United States. AgentMail states that it takes steps to ensure data is treated securely and that adequate controls are in place for international transfers.

For more information about how AgentMail handles data, see the AgentMail Privacy Policy.

Confidentiality of your enquiry

Once Tracey receives your callback request, your information is treated as confidential. The only exceptions are where Tracey needs support from her clinical supervisor, or where there is reason to believe someone is at risk of serious harm. Nothing is shared with other health or social care professionals without your written consent.

How long your information is retained

Tracey retains enquiry information for as long as is necessary to respond to your request and for reasonable follow-up. If you become a client, your records are stored digitally in encrypted files. If you do not proceed, your enquiry details are retained for a reasonable period and then deleted.

AgentMail retains email messages, drafts, attachments, and inbox records until the account holder deletes them. AgentMail's database point-in-time recovery provides recovery points for up to 35 days. Application, security, and diagnostic logs may be retained for up to 365 days.

Your rights

Under the GDPR you have the right to request access to your personal data, request correction or deletion, restrict processing, object to certain processing, and request data portability. To exercise any of these rights, please contact Tracey directly.

How to contact Tracey about your personal information

If you have any questions about how your personal information is handled, or if you would like to request access, correction, or deletion of your data, you can contact Tracey by:

• Telephone: 07512 966726
• Email: traceyhypnotherapy77@gmail.com

Google Ads measurement and cookies

This website uses the Google tag (gtag.js) to measure advertising performance for Google Ads. Google tag is provided by Google LLC and runs on every page of this website.

The Google tag may set or read the following types of cookies and browser storage on your device when you visit this website:

• Advertising cookies (_gcl_au, _gcl_gs) — used by Google to measure ad clicks and attribute visits to specific Google Ads campaigns
• Analytics cookies (_ga, _ga_*) — used to distinguish individual users and count visits (if applicable)

In addition to cookies, the Google tag may transmit the following information to Google's servers:

• The Google Click ID (gclid) from the URL, which links your visit to the Google Ads click that brought you here
• Your IP address (collected by Google and used to derive approximate location)
• The pages you visit on this website and the time of your visit
• Technical information about your browser and device

This information is used by Google to measure the effectiveness of advertising campaigns, to understand how visitors interact with this website after clicking on a Google Ads advertisement, and to report ad performance to Tracey Halliday. Tracey uses this information to understand which advertising is bringing visitors to the website and to improve advertising efficiency.

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, is a third-party recipient of this data. Google processes this information as a data processor on behalf of Tracey Halliday for advertising measurement purposes. For more information about how Google handles data collected via the Google tag, see the Google Advertising Technologies policy and the Google Privacy Policy.

Consent and your choices

This website implements Google Consent Mode v2. When you first visit this website, the following consent settings are set to "denied" by default:

• ad_storage — advertising-related storage (cookies)
• analytics_storage — analytics-related storage (cookies)
• ad_user_data — sending user data to Google for advertising
• ad_personalization — using data for personalised advertising

With these defaults in place, the Google tag loads on every page but does not set advertising or analytics cookies, and does not send personal data to Google for advertising purposes, until you have given consent. In this default state, Google receives limited "cookieless" information about your visit (such as the page URL and a cookieless ping) to provide aggregate measurement reporting.

When you visit this website for the first time, a cookie consent banner appears at the bottom of the screen. The banner gives you two equally clear options:

• Accept all — grants consent for all four storage types listed above, allowing Google to set advertising and analytics cookies and send user data to Google for advertising purposes
• Reject non-essential — keeps all four storage types denied, so no advertising or analytics cookies are set and no user data is sent to Google for advertising purposes

Your choice is stored in your browser's local storage, so it is remembered on your next visit and the banner does not appear again. Essential website functionality (browsing, completing the callback form, contacting Tracey) works regardless of your choice. Rejecting non-essential cookies does not affect the core operation of this website.

You can change your consent choice at any time by clicking the Cookie Settings link in the website footer. This reopens the consent banner, allowing you to switch between accepting and rejecting non-essential cookies. Your new choice is saved to local storage and applied immediately.

You can also control or limit tracking by:

• Using your browser's private or incognito browsing mode
• Blocking third-party cookies in your browser settings
• Using browser extensions that block tracking scripts
• Opting out of Google personalised advertising at Google Ads Settings

For more information about your choices regarding Google advertising, visit Google's Advertising Technologies information page.

Session storage use

The callback form uses your browser's session storage to temporarily hold marketing attribution parameters (such as gclid and UTM values) between page views during your visit. This session storage is cleared automatically when you close your browser tab. No persistent first-party cookies or local storage are set by the form itself.

As described above, the Google tag may set persistent cookies for advertising and analytics purposes, subject to the Consent Mode defaults described in the previous section.

Crisis support

If you need urgent support, please contact a GP, call NHS 111 for medical advice, or in an emergency call 999. The Samaritans are available 24 hours a day on 116 123 (free to call).