Privacy Policy

Introduction

Hyp-Gnosis Academy is committed to protecting your privacy and ensuring that your personal data is handled responsibly and transparently.

This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The data controller for your personal information is Hyp-Gnosis Academy, contactable at [email protected].

Information We Collect

We may collect and process the following personal data:

Name — to address you personally and maintain records
Email address — to communicate with you and send session information
Contact form submissions — information you choose to share when enquiring
Booking information — collected via Calendly when scheduling sessions
Payment information — processed securely via PayPal (we do not store card details)
Session-related information — birth details for Human Design readings, notes relevant to your session
Website usage data — collected via cookies and analytics to improve user experience

How We Use Your Information

We use your personal data to:

Respond to your enquiries and communicate with you
Manage bookings and deliver services
Process payments securely
Send session recordings or follow-up materials
Improve website functionality and user experience
Meet legal or regulatory obligations
Send occasional updates about services (with your consent)

How Data Is Stored & Protected

Your personal data is stored securely using digital storage systems with appropriate technical and organizational measures to prevent unauthorized access, loss, or misuse.

Access to personal data is limited to the business owner and is only used for the purposes outlined in this policy.

Session recordings are shared via WeTransfer with a 7-day download window. After this period, recordings are no longer accessible via the shared link.

While we take reasonable steps to protect your data, no system is completely secure. We cannot guarantee absolute security but remain committed to protecting your information.

Third-Party Services

We use the following third-party services, each with their own privacy policies:

Calendly — for booking and scheduling sessions
PayPal — for secure payment processing
WeTransfer — for sharing session recordings
Email service provider — for sending communications
Website hosting provider — for hosting this website

We encourage you to review the privacy policies of these third-party providers to understand how they handle your data.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy.

You may request deletion of your data at any time, and we will comply unless retention is required for legal, accounting, or regulatory purposes.

Session recordings shared via WeTransfer are accessible for 7 days. After this period, links expire, though local copies may be retained for record-keeping purposes.

Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate or incomplete data
Right to erasure — to request deletion of your personal data
Right to restriction — to request that we limit how we use your data
Right to object — to object to processing of your data in certain circumstances
Right to data portability — to request transfer of your data to another provider
Right to withdraw consent — to withdraw consent for data processing at any time

To exercise any of these rights, please contact us at [email protected].

Cookies

Cookies are small text files placed on your device to help improve your experience on our website.

We may use cookies to remember your preferences, analyze website traffic, and improve functionality. You can manage or disable cookies through your browser settings, though this may affect your experience on the site.