Privacy Policy

Last updated: October 2025
Website: https://www.hannahmedicinewoman.co.uk
Email: hannah.medicinewoman@hotmail.com

1. Introduction

Welcome to Hannah Medicine Woman.
Your privacy and trust are very important to me. This policy explains how I collect, use, and protect your personal information when you use my website, book a service, or communicate with me.

I am committed to processing your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who I Am

Hannah Medicine Woman is operated by:
Hannah Norris
Based in the United Kingdom
Email: hannah.medicinewoman@hotmail.com

For the purposes of data protection law, I am the Data Controller for your personal information.

3. What Information I Collect

I may collect and store the following personal information:

a. When you book or enquire about a service

Your full name
Email address
Phone number (if provided)
Relevant health or wellbeing information (shared voluntarily)
Details of your booking, payment, or communication

b. When you visit the website

Your IP address and basic browser/device data (collected through cookies or analytics tools)
Any information submitted through contact forms or newsletter sign-ups

c. When you subscribe to updates

Your name and email address (for newsletters or event information)

4. How I Use Your Information

Your information is used only for the purposes it was provided, including:

Managing bookings and communications
Providing treatments, sessions, or courses
Maintaining client records
Sending appointment reminders or follow-up emails
Sharing newsletters or updates (only if you’ve opted in)
Meeting legal, insurance, or tax obligations

I do not sell or rent your data to any third parties.

5. Lawful Basis for Processing

Under UK GDPR, I process personal data based on one or more of the following lawful grounds:

Consent — when you have given clear consent (e.g. newsletter sign-up)
Contract — when processing is necessary for a booking or service you’ve requested
Legal obligation — when required by law or insurance purposes
Legitimate interests — when processing is necessary for the running of my business, and your rights are not overridden

6. Data Storage and Security

Your personal information is stored securely using password-protected systems and, where relevant, encrypted digital storage.
Any paper notes are kept in a locked location accessible only to me.

I take all reasonable steps to protect your data from unauthorised access, alteration, or disclosure.

7. Data Retention

I will keep your information only for as long as necessary for the purpose it was collected.

Client records are retained for up to 7 years after your last session (in line with insurance and legal requirements).
Mailing list data will be kept until you unsubscribe.
After the retention period, your information will be securely deleted or destroyed.

8. Sharing Your Information

Your data will only be shared when necessary and appropriate, such as:

With secure third-party systems used for bookings, email management, or payments (e.g. Calendly, Stripe, or Mailchimp), each compliant with UK GDPR.
With legal or professional advisers (if required by law or for insurance purposes).

I will never sell, trade, or distribute your personal information for marketing or profit.

9. Your Rights

You have the right to:

Access a copy of the data I hold about you
Request correction of inaccurate data
Request deletion of your data (where legally possible)
Withdraw consent at any time (for example, unsubscribing from emails)
Object to or restrict certain types of processing
Lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe your data has been misused

To exercise any of these rights, please email hhannah.medicinewoman@hotmail.com

10. Cookies and Website Analytics

This website may use small text files known as cookies to improve your browsing experience and understand website traffic.

Cookies may collect:

Anonymous usage data
Device and browser type
Pages visited and time spent

You can disable cookies at any time via your browser settings.

Analytics data helps me understand how visitors use the site so that I can improve it, but it does not personally identify you.

11. Email and Newsletter Communications

If you choose to subscribe to updates or newsletters:

Your name and email will be stored securely in an email marketing system (such as Mailchimp).
You can unsubscribe at any time by clicking the “unsubscribe” link in any email.

12. External Links

My website may include links to other websites.
I am not responsible for the privacy practices or content of external sites, so please review their privacy policies separately.

13. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect legal, technical, or business changes.
The latest version will always be available on this page, with the effective date shown at the top.