PRIVACY POLICY

Last updated: February 2026

 

​1. Introduction

1.1 We are committed to safeguarding the privacy of our website visitors and service users.

1.2 This website is owned and operated by Just Imagine Therapy, trading as Cycles of Transformation.

1.3 We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our website and services, we will ask you to consent to our use of cookies when you first visit our website.

​

2. The Personal Data We Collect

2.1 In this section, we set out the general categories of personal data that we process.

Contact Data

2.2 We may process data enabling us to get in touch with you, including your name, email address, telephone number, postal address, and/or social media account identifiers. The source of this data is you.

Account Data

2.3 We may process your website user account data, including your account identifier, name, email address, account creation and modification dates, website settings, and marketing preferences. The primary source is you, although some elements may be generated by our website.

Transaction Data

2.4 We may process information relating to transactions, including purchases of services. This may include your name, contact details, payment details, and transaction details. The source is you and/or our payment services provider.

Communication Data

2.5 We may process information contained in or relating to any communication that you send to us or that we send to you, including content and metadata. Our website generates metadata associated with communications made using website contact forms.

Usage Data

2.6 We may process data about your use of our website and services, including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, and website navigation paths. The source is our analytics tracking system.

Enquiry Data

2.7 We may process information contained in any enquiry you submit to us regarding services. This may be processed for the purposes of offering, marketing, and selling relevant services to you. The legal basis for this processing is consent.

Notification and Marketing Data

2.8 We may process information that you provide for the purpose of subscribing to our email notifications, newsletters, or marketing communications. This includes information collected through:

• Website opt-in forms

• Quizzes and free resources (where you provide your email to receive results or downloads)

• Therapy or session contracts (where you consent to receive updates about workshops, offerings, or related communications)

The legal basis for this processing is consent. You may withdraw consent at any time by using the unsubscribe link in any email or by contacting us directly.

Quiz and Free Resource Data

2.9 If you complete a quiz, download a free resource, or sign up for any offering on our website, we collect the information you provide (such as name, email, and any responses). This data is used to:

• Deliver your results, resource, or requested content

• Send relevant follow-up communications

• Provide information about related services that may support you

The legal basis for this processing is consent.

Session and Therapy Data

2.10 If you book a therapy session, astrology reading, or other 1:1 service, we collect information necessary to deliver that service, including:

• Name and contact details

• Birth details (for astrology readings)

• Session notes and records (kept confidential and stored securely)

• Payment information

Session records are kept in accordance with professional standards and requirements set by the National Counselling & Psychotherapy Society (NCPS) and the National Hypnotherapy Society (NHS).

The legal basis for this processing is contractual necessity and legitimate professional interest.

​

3. How We Use Your Data

3.1 We use your personal data for the following purposes:

• To deliver services you have purchased or requested

• To communicate with you about bookings, sessions, and enquiries

• To send you resources, results, or content you have opted in to receive

• To send marketing communications where you have given consent

• To improve our website and services

• To comply with legal and professional obligations

3.2 We will never sell your data to third parties.

3.3 We will only share your data with third parties where necessary to deliver our services (see Section 4) or where required by law.

​

4. Third-Party Services

4.1 We use third-party services to operate our website and deliver our services:

ServicePurpose

WixWebsite hosting and forms

ZoomVideo sessions and readings

MailerLiteEmail marketing and automated sequences

PayPalPayment processing

StripePayment processing

4.2 These providers may collect and process data in accordance with their own privacy policies. We encourage you to review their policies if you have concerns.

4.3 We only use reputable providers who comply with applicable data protection regulations.

​

5. Your Rights

5.1 Your principal rights under data protection law are:

(a) Right to access – you can ask for copies of your personal data.

(b) Right to rectification – you can ask us to correct inaccurate or incomplete personal data.

(c) Right to erasure – you can ask us to delete your personal data.

(d) Right to restrict processing – you can ask us to restrict the processing of your personal data.

(e) Right to object to processing – you can object to the processing of your personal data.

(f) Right to data portability – you can ask that we transfer your personal data to another organisation or to you.

(g) Right to complain – you can complain about our processing of your personal data to a supervisory authority (in the UK, this is the Information Commissioner's Office: https://ico.org.uk).

(h) Right to withdraw consent – where our processing is based on consent, you can withdraw that consent at any time.

5.2 These rights are subject to certain limitations and exceptions. You can learn more by visiting https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

5.3 You may exercise any of your rights by written notice to us using the contact details below.

​

6. Data Retention

6.1 We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law or professional standards.

6.2 Session records for therapy clients are retained in accordance with NCPS and NHS guidelines.

6.3 Marketing data is retained until you unsubscribe or request deletion.

6.4 Transaction data is retained as required for accounting and legal purposes.

​

7. About Cookies

7.1 A cookie is a file containing an identifier that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page.

7.2 Cookies may be "persistent" (stored until expiry or deletion) or "session" (expire when the browser is closed).

7.3 Cookies may not contain any information that personally identifies a user, but personal data we store about you may be linked to information stored in and obtained from cookies.

​

8. Managing Cookies

8.1 Most browsers allow you to refuse and delete cookies. Methods vary by browser. Up-to-date information is available here:

• Chrome: https://support.google.com/chrome/answer/95647

• Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

• Opera: https://help.opera.com/en/latest/security-and-privacy/

• Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

• Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac

• Edge: https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy

8.2 Blocking all cookies will have a negative impact on the usability of many websites.

8.3 If you block cookies, you may not be able to use all features on our website.

​

9. Data Security

9.1 We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

9.2 Data is stored securely using password-protected systems and reputable third-party providers.

9.3 However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

​

10. International Data Transfers

10.1 Some of our third-party providers may store or process data outside the UK or EU.

10.2 Where this occurs, we ensure that appropriate safeguards are in place in accordance with UK and EU data protection regulations.

10.3 By using our services, you consent to the transfer of your data to these providers.

​

11. Amendments

11.1 We may update this policy from time to time by publishing a new version on our website.

11.2 You should check this page occasionally to ensure you are happy with any changes.

11.3 We may notify you of significant changes by email.

​

12. Contact

12.1 This website is owned and operated by Just Imagine Therapy, trading as Cycles of Transformation.

12.2 We are registered in England and Wales.

12.3 You can contact us:

• Using our website contact form

• By email: info@cyclesoftransformation.com or info@justimaginetherapy.com