Jane Giles

Start your course today

Jane Giles Hypnotherapy

Privacy Policy

What information I collect, why, and how I look after it.

Last updated: October 2026

Introduction

Your privacy is important to me. This Privacy Policy explains what personal information I collect when you use janegileshypnotherapy.co.uk, why I collect it, how I look after it and what your rights are.

I keep this simple: I collect only what I need to answer your enquiries and to give you access to the online courses you buy. I do not sell your information, I do not use advertising or tracking cookies, and I do not share your information with anyone for their own marketing.

Who I am

The data controller for this website is Jane Giles, trading as Jane Giles Hypnotherapy.

What information I collect and why

When you contact me. If you use the contact form, I receive your name, email address, phone number (if you give it) and your message. The form sends these to me by email; they are not stored on the website. I use them only to reply to you and to arrange sessions. Legal basis: taking steps at your request before an agreement, and my legitimate interest in answering enquiries.

When you buy an online course. I receive your name, email address and the details of your order (course, price, date and payment status). Your card or other payment details are entered directly into Stripe’s secure payment form and never reach this website. Legal basis: performance of a contract.

Your student account. Buying a course creates an account so that you can sign in and use it. The account holds:

  • your name and email address, and a profile photo if you choose to add one;
  • the courses you have access to and your progress through each session;
  • the point you reached in each course video or audio, so you can continue where you left off on any device;
  • the devices you are signed in on (the type of browser and device, and the network (IP) address used when you signed in), so that you can see them on your Account page and sign out of the others.

Legal basis: performance of a contract.

Signing in. There are no passwords. To sign in, you enter your email address and I send you a six-digit code. The code works for 15 minutes and is stored only in a scrambled (hashed) form. You stay signed in on up to three devices for up to 90 days. Legal basis: performance of a contract and my legitimate interest in keeping accounts secure.

Emails I send. I email you sign-in codes, order confirmations and important messages about your course. I do not send marketing emails, and I will only do so in future if you have opted in.

Who helps me run the website

I use a small number of trusted services. Each one handles your information only as needed for its task:

  • Stripe – payment processing. Stripe also keeps payment information to meet its own legal obligations, for example to prevent fraud (stripe.com/gb/privacy).
  • Cloudflare Turnstile – protects the contact and sign-in forms from spam and automated abuse. It checks signals from your browser instead of asking you to solve a puzzle (cloudflare.com/privacypolicy).
  • Easyspace (iomart) – UK-based hosting for the website, its database and the email used to send messages from the site.
  • WordPress – the software the website runs on. It is installed on my own hosting, so it does not send your information to WordPress.org.

The website’s fonts, video and audio players are hosted on the site itself, so viewing a page does not send your information to Google or other third parties.

Some of these providers may process information outside the UK. Where they do, they use the legal safeguards required by UK data protection law, such as the UK International Data Transfer Agreement or adequacy regulations.

Cookies and similar technologies

This website uses only essential cookies that it needs to work, so it does not ask for cookie consent:

  • Sign-in cookies keep you signed in to your student account (up to 90 days).
  • A temporary sign-in cookie connects the code I email you to the browser you requested it from (15 minutes).
  • A temporary checkout cookie signs you in to your new course in the browser you paid from (one hour).
  • Stripe may use cookies on the payment step that it needs to take payments securely and prevent fraud.
  • Cloudflare Turnstile may use technologies needed for its spam check on the forms.

Your browser also stores your playback position in course audio and video on your own device (local storage), so that they resume where you stopped.

There are no analytics, advertising or social media tracking cookies.

How long I keep your information

  • Enquiries: for as long as needed to deal with them, and no longer than two years after our last contact, unless you become a client.
  • Orders: six years from the end of the tax year of the purchase, as required by HMRC.
  • Student accounts and course progress: for as long as you have access to a course. You can ask me to delete your account at any time. Your order records will still be kept for the period above.
  • Sign-in codes: 15 minutes. Sign-in sessions: up to 90 days.

Keeping your information secure

The website is served only over a secure (HTTPS) connection. Course videos, audios and documents can be opened only by signed-in students with access to that course. Access to the website’s administration is restricted. No method of sending or storing information is completely secure, but I take all reasonable steps to protect your data.

Your rights

Under UK data protection law you have the right to:

  • access the personal information I hold about you;
  • correct information that is wrong or out of date (you can change your name, email and photo yourself on your Account page);
  • ask me to delete your information;
  • restrict or object to how I use it;
  • receive your information in a portable format;
  • withdraw consent where I rely on it.

To use any of these rights, email info@janegileshypnotherapy.co.uk. I will reply within one month.

If you are unhappy with how I have handled your information, please contact me first. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk, 0303 123 1113.

Children

This website and the online courses are intended for adults aged 18 and over. I do not knowingly collect information from children online.

Changes to this policy

I may update this policy from time to time. The date at the top shows the latest version. If I make significant changes, I will tell students by email or with a notice on the website.

Contact

If you have any questions about this Privacy Policy or your information, please email info@janegileshypnotherapy.co.uk.