Legal
Privacy Policy
UK GDPR Notice
Effective Date: 30 July 2026
This Privacy Policy explains how Alona Willis (“we”, “our”, “us”) collects, uses, stores, and protects your personal data when you visit this website, book a session, communicate with us, or use our regression therapy and hypnosis services.
We are committed to protecting your privacy and handling your personal data transparently and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). By using this website or services, you acknowledge this Privacy Policy.
Data Controller
The Data Controller responsible for your personal information is:
Alona Willis Regression Hypnotherapist Email: [email protected]
Personal Data We Collect
We may collect and process the following categories of personal data:
Personal Identification
- Full name
- Date of birth
- Email address
- Phone number
- Billing address
- Country and region
Technical & Website Usage
- Browser type
- Device type and device ID
- IP-related usage information
- Website usage data
- Session statistics
- Trackers and analytics data
Hypnotherapy & Session Information
- Audio recordings of sessions
- Video recordings of sessions
- Session notes
- Brief notes regarding session outcomes
- Appointment history
Payment Information
- Payment details
- Billing information
- Transaction records
Special Category Data
Some information shared during regression hypnotherapy or hypnosis sessions may constitute “special category data” under UK GDPR, including information relating to emotional wellbeing, mental health, spiritual beliefs, or personal experiences. We process this information only with your explicit consent, for the provision of therapeutic services, or where otherwise permitted under applicable law.
How We Collect Your Data
Your data may be collected when you complete contact or booking forms, purchase services, communicate by email, phone, or messaging, participate in hypnotherapy sessions, browse or use the website, or voluntarily provide information during sessions.
How We Use Your Information
Your information may be used to provide regression hypnotherapy and hypnosis services, manage appointments and sessions, maintain internal records, communicate regarding bookings or services, process payments and billing, improve website functionality and services, analyse website usage and visitor experience, respond to enquiries, conduct market research, send promotional emails or updates (where consent has been provided), and provide follow-up support after sessions.
Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases: Consent (where you provide explicit consent for hypnotherapy services, session recordings, marketing communications, or educational use); Contract (processing necessary to fulfil services requested by you); Legitimate Interests (to improve services, website functionality, business administration, and client support); and Legal Obligation (where processing is necessary to comply with legal or regulatory requirements).
Educational & Training Use of Data
With your explicit consent, session recordings, anonymised notes, or selected session material may be used for educational purposes, professional training, supervision, therapeutic development, or case study analysis. Where possible, identifying details will be removed or anonymised to protect client privacy. You may withdraw your consent for educational or training use at any time by contacting us.
Session Recordings
Audio and video recordings may be created during sessions for therapeutic review, client support, record keeping, and educational or training purposes (with explicit consent). A copy of the recording may be provided to the client.
Data Storage & Retention
Your personal data may be securely stored in encrypted cloud storage, on Google Drive, on password-protected devices, or on encrypted memory storage devices. We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, insurance, and professional practice requirements. When no longer required, data will be securely deleted or destroyed.
Sharing Your Information
We do not sell or rent your personal data. Your information may be shared only where necessary with secure payment providers, website hosting providers, IT or cloud storage providers, and legal or regulatory authorities where required by law. All third parties are expected to comply with UK GDPR standards.
International Transfers
Some service providers (such as cloud or email providers) may process data outside the United Kingdom. Where international transfers occur, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Security Measures
We implement appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, misuse, alteration, destruction, or accidental loss. Security measures include password protection, encrypted storage, secure cloud services, and restricted access controls. However, no online transmission or storage system can be guaranteed 100% secure.
Your Rights Under UK GDPR
You have the following rights: Right of Access (request a copy of your personal data); Right to Rectification (request correction of inaccurate or incomplete data); Right to Erasure (request deletion of your personal data in certain circumstances); Right to Restrict Processing (request limitation of how your data is processed); Right to Data Portability (request transfer of your data to another organisation or directly to you); Right to Object (object to processing in certain circumstances, including direct marketing); Right to Withdraw Consent (withdraw consent at any time where processing relies on consent).
To exercise your rights, contact: [email protected]
Marketing Communications
We may send promotional emails regarding services, offers, updates, workshops, and news. You may opt out at any time using the unsubscribe link or by contacting us directly.
Cookies & Analytics
This website may use cookies and analytics tools to improve website functionality, analyse visitor behaviour, and enhance user experience. You may manage cookies through your browser settings. A separate Cookie Policy may also apply.
Third-Party Links
This website may contain links to external websites. We are not responsible for the privacy practices or content of third-party sites.
Children's Privacy
Services are not intended for individuals under 18 years of age unless parental or legal guardian consent has been provided where legally required.
Complaints
If you believe your data protection rights have been breached, you may contact the Information Commissioner's Office (ICO) at ico.org.uk or by telephone on 0303 123 1113. We would appreciate the opportunity to resolve concerns directly first.
Changes to This Policy
We may update this Privacy Policy periodically to reflect legal, technical, or business changes. The latest version will always appear on this website.
Contact
For privacy-related enquiries, requests, or concerns, please contact:
Alona Willis Regression Hypnotherapist Email: [email protected] Website: https://awregressiontherapy.com/
Information Commissioner's Office (ICO)
If you have concerns about how your data is handled, you may contact the ICO at ico.org.uk or by telephone on 0303 123 1113. We would appreciate the opportunity to resolve concerns directly first.
For privacy-related enquiries, please get in touch.
[email protected]