Effective Date: 5 June 2025
ICO Registration No. ZB809203

This Privacy Policy describes how Gareth Amos – Hypnotherapist, Emotion & Body Worker (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit our website www.garethamos.com or use our services.

1. Who We Are

I am Gareth Amos, providing emotional and manual therapy services. For the purpose of data protection laws, I am the data controller of your personal information.

If you have any questions about this policy or how we handle your data, please contact:
Email: garethamos25@gmail.com

---

2. What Information We Collect

We may collect and process the following types of personal data:

• Contact information – such as name, email address, and phone number when you contact us or book an appointment.
• Health or treatment-related information – where voluntarily provided during sessions or intake forms (this data is treated with strict confidentiality).
• Booking details – through our third-party provider, Treatwell.
• Technical data – such as IP address, browser type, and information collected through cookies (see our Cookie Policy).

---

3. How We Collect Your Data

We collect your data in the following ways:

• Directly from you when you fill out forms or contact us.
• When you book services via Treatwell.
• Automatically through cookies and similar technologies when you visit our website.

---

4. How We Use Your Data

We use your data to:

• Respond to enquiries or requests.
• Provide and manage our services.
• Process and manage bookings (via Treatwell).
• Comply with legal obligations (e.g. health and safety, insurance requirements).
• Improve our website and user experience.

We do not sell your data or use it for unsolicited marketing.

---

5. Our Booking System: Treatwell

When you book an appointment via Treatwell, your data is processed in accordance with their privacy practices. Treatwell acts as a data processor on our behalf for booking management purposes.

• Treatwell may collect your name, contact information, appointment details, and payment data.
• For full details of how Treatwell processes your data, please see their Privacy Policy.

We access your booking details via Treatwell’s secure portal and do not store any payment information ourselves.

---

6. Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

• Consent – for direct communications and cookies.
• Contract – to provide our services to you.
• Legal obligation – for recordkeeping, taxation, or insurance compliance.
• Vital interests / legitimate interests – where applicable, particularly in relation to health or safety.

---

7. Data Sharing and Storage

We do not share your personal data with third parties except:

• With Treatwell as our booking processor.
• Where legally required (e.g. safeguarding concerns or legal claims).
• With professional advisers (e.g. insurers or legal representatives), as needed.

Your data is stored securely and only accessed by authorised individuals.

---

8. Data Retention

We retain your personal data only as long as necessary:

• Booking/contact data: typically retained for 6 years for insurance purposes.
• Health records: retained securely as required by professional standards or legal obligations.

After this period, your data will be securely deleted or anonymised.

---

9. Your Data Protection Rights

You have rights under the UK GDPR, including:

• The right to access your data.
• The right to correct inaccuracies.
• The right to request deletion.
• The right to restrict or object to processing.
• The right to data portability (in certain cases).
• The right to lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise these rights, contact us at the email above.

---

10. Changes to This Policy

We may update this policy occasionally. Changes will be posted on this page, and the date will be updated.

---

11. Contact

If you have any concerns about how we handle your personal data, please contact:
Email: garethamos25@gmail.com

You also have the right to lodge a complaint with the ICO at www.ico.org.uk.us at:

ICO Registration No. ZB809203