Privacy Policy

Last updated: June 2026  ·  Keeley Timmins Hypnotherapy

Your privacy matters. This policy explains clearly and simply what personal information is collected when you purchase or use the Freedom From Health Anxiety programme, how it is used, and how it is kept safe.

I do not collect or store any information about your health, mental health history, or personal circumstances. Only the information necessary to provide you with access to the programme and to process your payment is collected.

1. About Me

Keeley Timmins Hypnotherapy is the data controller responsible for your personal data in connection with the Freedom From Health Anxiety programme.

2. What Data Is Collected

When you purchase the Freedom From Health Anxiety programme, I collect only the following:

• Full name - to identify your account and personalise your access
• Email address - to deliver your programme access, send confirmation of purchase, and provide any programme-related communications
• Phone number - if provided at checkout, used only for account or order-related contact
• Payment information - processed securely by Systeme.io and their payment processor. Card details are not stored at any point

I do not collect, request, or store any information about your health, medical history, mental health, or personal circumstances. The programme is self-paced and fully digital - your personal journey within it remains entirely private to you.

3. How Your Data Is Used

The information you provide is used solely for the following purposes:

• To process your purchase and provide access to the programme
• To send you your login details and any programme-related updates
• To respond to any queries or support requests you raise with me
• To comply with my legal and financial obligations (e.g. maintaining records of transactions for HMRC purposes)

Your data will not be used for marketing purposes without your explicit consent, and it will never be sold to third parties.

4. Lawful Basis for Processing

Under UK GDPR, personal data is processed on the following lawful bases:

• Contractual necessity - processing your name and email is necessary to fulfil your purchase and deliver the programme
• Legal obligation - I am required to retain financial records for 6 years under HMRC requirements
• Legitimate interests - to respond to support queries and maintain the security of my systems

5. Who Your Data Is Shared With

Your data is only shared where strictly necessary:

• Systeme.io - the programme platform and payment processor. They handle your checkout, course access, and any email communications relating to your purchase. Their privacy policy is available at systeme.io
• Legal requirement - I may be required to disclose your data if required to do so by law, court order, or regulatory authority

Your data is not shared with any marketing companies, data brokers, or any third party for commercial purposes.

6. How Your Data Is Stored and Protected

Your personal data is held securely within Systeme.io's platform, which uses industry-standard encryption and security measures. Payment transactions are processed using 256-bit SSL encryption.

Your data is accessed only on password-protected devices. Only I and any directly authorised personnel have access to your information.

7. How Long Your Data Is Kept

• Purchase and account records - retained for 6 years in line with HMRC financial record-keeping requirements
• Email communications - retained for the duration of your programme access and up to 2 years thereafter in case of any queries or disputes
• Programme access - you have lifetime access to the programme. Your account remains active unless you request deletion. In the event that I am unable to fulfil my obligations due to serious illness, incapacity or death, reasonable prior notice will be given where possible.

After the applicable retention period, your data will be securely deleted from my systems.

8. Cookies

The Freedom From Health Anxiety programme page may use basic technical cookies necessary for the website to function. These do not track you across other websites and do not collect personal information.

Systeme.io may use cookies to manage your logged-in session and programme access. Please refer to Systeme.io's cookie policy for full details.

If any analytics tools are added in future, this policy will be updated to reflect that before they are implemented.

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access - you can request a copy of the personal data held about you
• Right to rectification - you can ask me to correct any inaccurate data
• Right to erasure - you can ask me to delete your data, subject to my legal retention obligations
• Right to restriction - you can ask me to restrict how your data is used in certain circumstances
• Right to data portability - you can ask me to provide your data in a portable format
• Right to object - you can object to certain types of processing

To exercise any of these rights, please contact me at contact@keeleytimmins.com. I will respond within 30 days.

If you are unhappy with how your data has been handled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Changes to This Policy

This privacy policy may be updated from time to time. Any changes will be posted on this page with an updated date at the top. You are encouraged to review this policy periodically.

11. Contact

If you have any questions about this privacy policy or how your data is handled, please get in touch: