Privacy Policy

Last updated: 12 January 2026

This Privacy Notice explains how Zestable Mindset (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you visit our website or contact us.

If you have any questions about this notice or how we use your personal data, you can contact us at:

Email: hello@zestablemindset.com
Business name: Zestable Mindset

We may collect personal information that you voluntarily provide when you contact us, enquire about services, or book a session. This may include:

• Name
   
• Email address
   
• Phone number (if provided)
   
• The content of your enquiry or message
   
• Contact preferences
   

If you choose to share it, we may receive information about your wellbeing, such as stress, anxiety, sleep difficulties, emotional wellbeing, or other information shared in connection with hypnotherapy or Reiki enquiries or sessions.

We only collect and use this information where necessary to:

• respond appropriately to your enquiry
   
• assess suitability for services
   
• provide sessions safely and professionally
   

When you visit our website, we may automatically collect limited technical information such as IP address, browser type, device information, and pages visited. This information is typically collected through cookies and similar technologies.

We use your personal information to:

• Respond to enquiries and communicate with you
   
• Provide and administer requested services
   
• Arrange bookings (where applicable)
   
• Maintain website security and prevent spam or misuse
   
• Improve our website and services (for example, through analytics if enabled)
   
• Comply with legal and regulatory obligations

We only process personal information where we have a lawful basis to do so. These may include:

• Consent – where you submit an enquiry, request services, or agree to optional cookies. You may withdraw consent at any time.
   
• Performance of a contract – where processing is necessary to provide a service you request or to take steps before entering into a contract.
   
• Legitimate interests – to operate and improve our website, respond to enquiries, and ensure security, provided these interests do not override your rights.
   
• Legal obligation – where we are required to comply with the law.
   
• Vital interests – in rare circumstances where processing is necessary to protect someone’s life.
   

Where required, health and wellbeing information is processed on the basis of your explicit consent and only for the purposes described in this notice. You may withdraw consent at any time by contacting us. This does not affect processing already carried out.

We do not sell your personal data.

We may share your information with trusted service providers where necessary to operate our website and deliver services, such as:

• Website hosting providers
   
• Contact form or email service providers
   
• Security and anti-spam tools
   
• Analytics providers (if enabled)
   
• Booking system providers (if used)
   
• Payment processors (if used)
   

We may also share information if required by law or to protect our legal rights, safety, or security.

We use cookies and similar technologies to ensure our website functions properly and securely, and (where enabled) to understand how visitors use our website.

Cookies may include:

• Essential cookies – required for basic site functionality and security
   
• Analytics cookies – used to understand website traffic and improve the site (if enabled)
   

You can manage or disable cookies through your browser settings and, where applicable, our cookie banner or preferences.

Some service providers may process personal data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in line with UK data protection law.

We retain personal information only for as long as necessary to fulfil the purposes outlined in this notice, including responding to enquiries and providing services, unless a longer retention period is required by law.

When personal data is no longer required, it is securely deleted or anonymised.

We use appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or disclosure.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Our services are not intended for children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected personal data relating to a child, please contact us at hello@zestablemindset.com and we will take appropriate action.

If you are located in the UK or EEA, you have rights under data protection law, including the right to:

• Access your personal data
   
• Request correction of inaccurate data
   
• Request erasure of your data
   
• Restrict or object to processing
   
• Request data portability (where applicable)
   
• Withdraw consent at any time
   

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully.

We may update this Privacy Notice from time to time. The most recent version will always be available on our website, and the “Last updated” date will reflect when changes were made.