Privacy policy
Last updated: 7 October 2026.
This policy explains how Blooming Heart collects and uses personal information when you visit https://bloomingheart.uk, contact Joanna, buy or access meditation and hypnosis audio recordings, PDF resources and online self-development courses, or take part in related learning activities.
1. Who is responsible for your information
Blooming Heart is presented on this website by Joanna Polanska.
Privacy enquiries: joanna@bloomingheart.uk. Postal address: West Mains, Westhill, AB32 7AJ, United Kingdom. Telephone: +44 7930 895517. Website: https://bloomingheart.uk.
Individual hypnotherapy or other one-to-one services may require additional privacy information covering consultation and treatment records. This course policy does not replace that information.
2. Information we collect
Contact and account information: your name, email address, username, password in its protected form, and details you choose to add to your profile.
Enquiries and bookings: the name, email address, phone number, preferred contact time and message you submit through appointment or contact forms. Please provide only information needed for your enquiry; detailed therapy information should be discussed through the agreed consultation process.
Purchase information: billing details required at checkout, products purchased, prices, discounts, tax, payment status, transaction references, refunds and related correspondence. Payment providers process payment credentials according to their own privacy information.
Learning information: courses you are enrolled in, the source and dates of access, lesson completion, course progress, and first recorded access to course content. We also retain the wording of notices you accept, acceptance times and their association with your course entitlement or order. These records do not prove that you watched an entire lesson.
Optional information: feedback, messages and reflection notes you choose to save in your account where that feature is enabled.
Technical and security information: IP addresses and information provided by your browser or device, login sessions, verification and security events, and activity needed to operate and protect the website. This may also be recorded by our hosting and security providers.
3. Why we use your information and our lawful bases
Contract: to process purchases, provide recordings and course access, manage accounts and enrolments, retain progress, arrange any included sessions, and handle purchase support and refunds. Without essential account or purchase details, we may be unable to provide the requested service.
Legal obligation: to maintain accounting and tax records and comply with applicable legal requirements.
Legitimate interests: to protect accounts and content, prevent fraud and misuse, diagnose problems, manage enquiries, assess course performance and retain proportionate evidence for disputes. We consider the effect on your privacy when relying on these interests.
Consent: for marketing subscriptions and non-essential cookies where required, and for optional processing that we specifically ask you to authorise. You can withdraw this consent without affecting the lawfulness of earlier processing. Withdrawal does not automatically remove records we must retain on another lawful basis.
4. Course notices and digital-content access
Before course content opens, we ask you to accept the course notice. We keep the exact wording you accepted and the acceptance time. A separate record may be created for a new course entitlement or repeat purchase.
We record first content access separately and may use these records when reviewing cancellation or refund requests. Accepting a course notice does not authorise marketing or waive your data protection rights.
Cancellation and refund conditions belong in our sales terms and course notices. This privacy policy does not remove your statutory consumer rights.
5. Reflection notes and sensitive information
You can use reflection exercises without saving the writing in your account. When account saving is off, new writing remains on the current lesson page and is lost on refresh or when you move away. You may export it as a PDF to your own device.
If account saving is enabled and you choose to save, your notes are stored in encrypted form. The plugin does not provide tutors with a note-reading screen. Encryption does not make information anonymous or prevent all access by people with authorised access to the underlying system.
You can download and clear saved course notes using the available account controls, or contact us for help. Finishing a course, letting access expire or switching saving off does not automatically delete existing saved notes. Backup copies may remain until their normal deletion date.
Please avoid entering diagnoses, medical histories or other sensitive information in general feedback, public comments or support forms. Course purchase consent is not explicit consent to process health information.
6. Who can access information and who we share it with
Authorised administrators access information needed to manage the website, purchases, support and compliance. Assigned tutors receive the learner information necessary to deliver and manage their courses. When tutor statistics are enabled, tutors see aggregate figures for assigned courses; that statistics view does not include customer billing details.
We use service providers for website hosting, backups, email delivery and payments. These providers receive the information needed for their services. We may also disclose relevant information to professional advisers, regulators or authorities where necessary or required by law.
We do not sell your personal information.
7. Emails and marketing
We send service emails such as account verification, password setup or reset, order information and course-consent confirmations. These are separate from promotional emails.
Our Quiet Your Mind page offers a free guided self-hypnosis recording through an email subscription. The form collects your name and email address and asks you to confirm your subscription. The recording can be listened to online or downloaded to your device.
The subscription also offers occasional reflections, wellbeing tools and updates from Joanna. You can unsubscribe using the link in subscription emails or contact joanna@bloomingheart.uk. Course acceptance and purchases are separate from this subscription.
8. Cookies and similar technologies
The website uses cookies and similar technologies needed for sign-in, security, shopping baskets, checkout and account sessions. Depending on your login choices, a session may continue after you close your browser.
9. External services, meetings and public content
Our website links to Bookwhen for event bookings, WhatsApp for enquiries, and social or media services such as Facebook and YouTube. Google reviews and profile images are displayed on the website. When you use an external service, its provider processes information under its own privacy policy. Google’s privacy policy is available at https://policies.google.com/privacy; Bookwhen’s privacy information is available at https://bookwhen.com/privacy; WhatsApp’s privacy information is available at https://www.whatsapp.com/legal/privacy-policy.
Courses may also use Google Meet for scheduled meetings and Google Forms for optional feedback where specified in the course. Do not submit health or other sensitive information through a general feedback form.
Embedded videos or other content may transmit information to the external provider when loaded. Where consent is required, these should remain blocked until you agree.
[CONFIRM WHICH EXTERNAL SERVICES AND EMBEDS ARE ACTUALLY USED, whether meetings are recorded, and any information collected through linked forms. If meetings are recorded, provide a separate notice before recording.]
[IF PUBLIC COMMENTS OR REVIEWS ARE ENABLED: We collect the information submitted, along with technical data used for moderation and spam prevention. Published text and your chosen display name may be publicly visible. Identify any spam-checking or Gravatar provider actually used. Remove this paragraph if the features are disabled.]
10. International transfers
Some providers may store or access information outside the United Kingdom. Where a restricted international transfer occurs, we must use an appropriate legal transfer mechanism and any required safeguards.
[INSERT ACTUAL PROVIDERS/DESTINATIONS AND APPLICABLE MECHANISMS, such as UK adequacy regulations or an appropriate UK international data transfer agreement/addendum. Do not claim that all data stays in the UK without checking provider arrangements.]
You can contact us for information about relevant transfer safeguards.
11. How long we keep information
We keep information only for as long as needed for its stated purpose, taking account of course access, support needs, applicable tax and accounting duties, and disputes. Course expiry does not itself delete your account, purchase history, progress or consent records.
[CONFIRM IMPLEMENTED RETENTION: the public website does not establish how long account and learning records, purchase/tax records, accepted notices, feedback, support messages, security logs and backups are kept. Insert the actual periods or specific deletion criteria before publication.]
Saved notes remain until you clear them or they are removed under our account-deletion or retention arrangements. Turning off note saving does not delete earlier notes.
If you request account deletion, we remove or anonymise personal data where appropriate. Some transaction or legal records may need to remain. Deleted information may persist in restricted backups until the backup retention period ends.
12. Keeping information secure
We use access controls and technical safeguards to protect personal information. Course content is restricted to authorised users, and saved account reflections are encrypted. No website or internet transmission can be guaranteed completely secure.
Keep your account password private and contact us if you suspect unauthorised access. Session controls help manage learning access; they are not physical-device tracking.
13. Your rights
Depending on the circumstances, you can request access to your information, correction, erasure, restriction of processing or transfer of information in a portable format. You can withdraw consent where we rely on it. Some rights have exceptions.
You have the right to object to processing based on legitimate interests on grounds relating to your situation. You can object to direct marketing at any time.
To make a request, contact [INSERT PRIVACY CONTACT EMAIL]. We may need proportionate information to confirm your identity. We normally respond within one month; where the law permits an extension, we explain it.
You can complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or by telephone on 0303 123 1113. You may also contact us first so we can try to resolve your concern.
14. Updates to this policy
We update this policy when our services or processing arrangements change. The date above shows the latest revision. We provide additional notice where a significant change requires it.
