This privacy policy relates to Hannah Moon Wellness and sets out how I collect and process your personal data through your use of this website and the services I provide. Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

I respect your privacy and am committed to protecting and respecting your personal data. It is important that you read this policy and check back frequently to see any updates or changes.  If you have any questions about this policy, including any requests to exercise your legal rights, please contact me at:


When I collect Data

Generally, I collect and process your information in the following ways:

  • When you visit my website;

  • When you communicate with me by telephone, email, via my website or through other communication channels, for example, through social media platforms;

  • When you make an appointment with me;

  • When you subscribe to my mailing lists and/or newsletters;

  • When you use my services (or express an interest in doing so);

  • When I seek information about you and receive your personal data in connection with your relationship with me; and

  • When you submit your personal data to me for any other reason.

Personal data may be collected in respect of current, prospective and former clients, subscribers to newsletters and visitors to my website and social media pages.


The Data I collect

I may collect, use, store and transfer different kinds of personal data about you as follows:

  • Information you give me. This is information about you that you give me by filling in forms on my website, or by corresponding with me by phone, e-mail, social media messaging or otherwise. It also includes information you provide when you enquire about my services, make an appointment, or attend appointments with me.

The information you give me may include your name, title, addresses, e-mail address, date of birth and phone numbers, financial and credit card information, personal description and demographic information (such as preferences and interests) and specific information relevant to your treatment plan (including appointment details and treatment notes). The information you provide may also include data concerning your health.

I am unable to send or receive encrypted emails so you should be aware that any emails I send or receive may not be protected in transit. I will also monitor any emails sent to me, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send me is within the bounds of the law.

I will keep a record of any treatment given and details of progress, including reviews of treatment planning to enable effectively plan your treatment.


  • Information I collect about you. With regard to each of your visits to my website the following information will be collected:

  • Technical Data including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system (including device) and platform and other technology on the devices you use to access my website.

Automated technologies or interactions. As you interact with my website, I may automatically collect Technical Data about your equipment, browsing actions and patterns. I collect this personal data by using cookies, server logs and other similar technologies.

  • Usage data about your visit and how you use my services, including information about how you use my website, the full Uniform Resource Locators (URL), clickstream to, through and from my site (including date and time), page response times, download errors, customer session duration, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) and methods used to browse away from the page.

  • Marketing and Communications Data including your preferences in receiving marketing from me and your communication preferences.

  • Information I receive from other sources (including third parties). This is information I receive about you if you use any of the other websites I operate or the other services I provide. I may receive personal data about you from various third parties and public sources including technical data from analytics providers such as Google based outside the EU or search information providers.


The purposes for using the information

I will use information held about you for the purposes of performing my contract with you; complying with my legal obligations; and my legitimate interests.  Specifically, information will be used in the following ways:

  • to manage my relationship with you, including arranging your appointments and discussing your treatment requirements;

  • to formulate treatment strategy and plan treatment;

  • to carry out my obligations arising from any contracts entered into between you and me and to provide you with the information and services that you request from me;

  • to maintain an attendance register/records of all appointments for tax, insurance and regulatory compliance purposes;

  • to send you marketing materials and newsletters, where you have consented to receive the same;

  • to obtain your feedback or to manage complaints;

  • to provide you with information about other services I offer that are similar to those that you have already enquired about;

  • to notify you about changes to my services;

  • to administer, manage and update your records;

  • to comply with laws and regulations that apply to me;

  • to administer my site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;

  • to ensure that content from my site is presented in the most effective manner for you and for your computer or device.

  • to measure or understand the effectiveness of advertising I serve to you and others, and to deliver relevant advertising to you;

I will only use your personal data for the purposes for which I collected it, unless I reasonably consider that I need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact me.

I do not carry out automated decision making.


Disclosure of your personal data

I may share only such of your personal data as is necessary with the parties set out below:

  • Third parties including:

  • my regulatory body where required;

  • my professional supervisor where I discuss aspects of my clinical work, or where I submit work to my tutor in connection with training (individual identities are not revealed during these sessions or submissions and supervision itself is confidential);

  • service providers who provide IT and system administration services, social media networks, data management companies and professional advisers (including lawyers),

  • HM Revenue & Customs, regulators and other authorities; and

  • analytics and search engine providers that assist in the improvement and optimisation of my site.

  • If I am under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply my terms of use and other agreements; or to protect my rights, property, or safety, or that of others.

I require all third parties to respect the security of your personal data and to treat it in accordance with the law. I do not allow my third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with my instructions.


Data security

All practitioners are bound by their professional codes of conduct as defined by their accrediting organisation, which includes responsibility to manage your information in line with data protection legislation (including the Data Protection Act 2018). Any notes taken, together with other information provided by you, will stored securely in a locked cabinet or, where stored electronically, in password protected documents.

I have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

Unfortunately, the transmission of information via the internet is not completely secure. Although I will do my best to protect your personal data, I cannot guarantee the security of your data transmitted to my site; any transmission is at your own risk. Once I have received your information, I will use strict procedures and security features to try to prevent unauthorised access.


How long will you use my personal data for?

I will only retain your personal data for as long as necessary to fulfil the purposes I collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.


Your rights

You have the right to ask me not to process your personal data for marketing purposes. You can also exercise the right at any time by contacting me at  I will usually inform you (before collecting your data) if I intend to use your data for such purposes or if I intend to disclose your information to any third party for such purposes.

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues ( I would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact me in the first instance.

Your rights include the right to:

  • Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive details of the personal data I hold about you.

  • Request correction of the personal data that I hold about you. This enables you to have any incomplete or inaccurate data I hold about you corrected.

  • Request erasure of your personal data. This enables you to ask me to delete or remove personal data where there is no good reason for me continuing to process it. You also have the right to ask me to delete or remove your personal data where I may have processed your information unlawfully or where I am required to erase your personal data to comply with local law. Note, however, that I may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

  • Request the transfer of your personal data to you or to a third party. I will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. This right only applies to automated information which you initially provided consent for me to use or where I used the information to perform a contract with you.

  • Withdraw consent at any time where I am relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, I may not be able to provide certain products or services to you. I will advise you if this is the case at the time you withdraw your consent.



My website uses cookies to distinguish you from other users of my website. This helps me to provide you with a good experience when you browse my website and also allows me to improve my site.

A cookie is a small file of letters and numbers that I store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.

I use the following cookies:

  • Strictly necessary cookies. These are cookies that are required for the operation of my website. They include, for example, cookies that enable you to log into secure areas of my website or make use of e-billing services.

  • Analytical/performance cookies (e.g. traffic log cookies). They allow me to recognise and count the number of visitors and to see how visitors move around my website when they are using it. This helps me to improve the way my website works, for example, by ensuring that users are finding what they are looking for easily.

  • Functionality cookies. These are used to recognise you when you return to my website. This enables me to personalise my content for you, greet you by name and remember your preferences (for example, your choice of language or region).

  • Targeting cookies. These cookies record your visit to my website, the pages you have visited and the links you have followed. I will use this information to make my website and the advertising displayed on it more relevant to your interests. I may also share this information with third parties for this purpose.

I also use software called Google Analytics which is a web analytics service provided by Google Inc. in order to understand how visitors to my website use the site. The Google Analytics cookies remember you from one page request to the next, for example to differentiate between 'new' and 'returning' visitors. I receive reports from Google Inc. about website usage (such as the number of visitors to my site or the number of unique page views).

You can block and restrict cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. You may wish to visit, which contains comprehensive information on how to do this on a wide variety of desktop browsers. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of my site.