Last updated: October 2026

 

1. About this Privacy Policy

CENTRE with Jo Myhill is committed to respecting your privacy and protecting your personal information. This Privacy Policy explains what personal information I may collect, how and why I use it, how I keep it secure, how long I retain it, and your rights in relation to your information. I am the data controller responsible for the personal information I hold and use in connection with CENTRE with Jo Myhill.

 

Contact:
Jo Myhill
CENTRE with Jo Myhill
39 Windsor Drive
Wingerworth
Chesterfield
Derbyshire
S42 6TG

Email: jo@centrewithjomyhill.com

​

This policy applies to information collected through my website, enquiries, bookings, communications, sessions and other interactions with CENTRE with Jo Myhill.

​

2. The information I may collect

Depending on how you interact with CENTRE with Jo Myhill, I may collect some or all of the following:

​

Contact and enquiry information

• your name

• email address

• telephone/mobile number

• address, where relevant

• information you provide when making an enquiry

• information about what has prompted you to contact me and what you hope to achieve from working together.

 

Client and session information

If you become a client, I may hold information necessary to provide and manage your sessions, including:

• your name and contact details

• date of birth, where relevant

• emergency contact details

• information needed for safeguarding

• information contained in session notes

• information you choose to share during sessions about your experiences, circumstances, wellbeing or personal goals.

 

Information relating to children and young people

Where I work with someone under 18, I may also collect relevant information about their parent, carer or another person with parental responsibility, including contact details and information required for consent, communication and safeguarding.

​

Payment and financial information

I may hold information relating to payments, invoices and financial transactions, such as:

• your name

• invoice details

• payment dates and amounts

• records of payments made by bank transfer or other payment methods I may introduce.

I do not need to hold your full bank or card details where these are processed directly by a bank or payment provider.

 

Testimonials and feedback

If you choose to provide a testimonial or feedback, I may retain the information you provide. If I ask for permission to publish a testimonial, I will seek separate permission for publication and will only publish the information you have agreed may be used. This may include your first name or initials.

​

Website information

When you use my website, information may also be collected automatically through cookies and similar technologies, depending on the website functionality and services currently in use. This may include technical information about your device or browser and information about how you interact with the website. The use of non-essential cookies and analytics technologies will be subject to appropriate consent where required.

​

3. Information you choose to share during sessions

My work involves creating a space where you can talk openly about what is happening for you. You may therefore choose to share information about your physical or mental wellbeing, emotions, relationships, past experiences, trauma, diagnoses, medication, disability or other personal circumstances.

​

Some of this information may constitute special category personal data, including information concerning health.

I do not require you to provide a medical history as part of my standard onboarding process. I only use information that you choose to share, or information that is reasonably necessary for providing my services, managing your relationship with me, or dealing appropriately with safeguarding or other legal responsibilities.

​

I will handle sensitive information with particular care and will only use it for appropriate and legitimate purposes.

​

4. Why I use your information

I may use your personal information to:

• respond to enquiries;

• arrange and manage appointments;

• provide Energy Alignment Coaching and EFT services;

• communicate with you about your sessions;

• keep appropriate client records;

• understand your needs and provide an appropriate service;

• manage payments, invoices and business administration;

• deal with safeguarding, emergency situations or other serious concerns where necessary;

• comply with legal, regulatory, professional or insurance requirements;

• deal with complaints or concerns;

• maintain appropriate professional and insurance records;

• improve my services;

• manage my website and its functionality;

• send marketing communications where you have given appropriate consent;

• publish testimonials where you have separately given permission;

• protect the security of my business, systems and clients.

 

I will not use your personal information for a new purpose that is incompatible with the purpose for which it was originally collected without considering the appropriate legal requirements.

​

5. The legal basis for using your information

Data protection law requires me to have a lawful basis for processing personal information. Depending on what I am doing with your information, the lawful basis may include:

• Contract: where processing is necessary to provide services you have agreed to receive or to take steps at your request before entering into an agreement.

• Legitimate interests: where processing is necessary for the reasonable and proportionate running, administration and protection of my business, provided your rights and interests do not override those interests.

• Legal obligation: where I need to process information to comply with a legal requirement.

• Consent: where I ask you to make a genuine choice about whether your information may be used for a particular purpose, such as certain marketing or publication of a testimonial.

 

Where I rely on consent, you can withdraw that consent at any time. Withdrawal will not affect processing that took place before you withdrew your consent.

​

6. Sensitive and special category information

Some information you may choose to share with me, particularly information relating to health or wellbeing, may be special category personal data under UK data protection law.

​

Where I process special category information, I will ensure that an appropriate legal basis and relevant additional condition for processing apply.

​

I will only process such information where it is reasonably necessary for the relevant purpose, such as providing my service, maintaining appropriate client records, safeguarding, or complying with relevant legal, professional or insurance requirements.

​

I will not sell your personal information or sensitive information to third parties.

​

7. Client and session notes

I keep appropriate records of client work to support continuity of care/service, professional practice, safeguarding and the management of any concerns or complaints.

​

My handwritten session notes are kept to a minimum. Where possible, I use initials and dates rather than unnecessary identifying information.

​

Although these notes may not contain your full name, they may still constitute personal information because I am able to identify the person to whom they relate.

​

Client records are stored securely and are not routinely shared with other people.

​

I retain client records in accordance with my professional and insurance requirements. My professional insurance requires:

• records relating to adults to be retained for a minimum of seven years;

• records relating to minors to be retained for seven years after the minor reaches the age of 18;

• in relation to vulnerable adults, records may need to be retained for longer where reasonably necessary because limitation periods may be extended.

 

I may also retain information for longer where required by law, professional obligations or other applicable insurance requirements.

​

Records are reviewed and securely destroyed when they are no longer required.

​

8. Recording, transcription and AI-assisted note-taking

I do not routinely record client sessions. 

I do not use an AI-assisted note taking facility.

 

If I wish to record, transcribe or use an AI-assisted note-taking facility during a session, I will explain this to you beforehand and obtain your specific permission for that session.

​

This may include the use of recording or note-taking facilities available through Google Meet and associated Google services.

​

You are free to decline recording, transcription or AI-assisted note-taking. Your decision will not affect the service you receive.

​

Where recording, transcription or AI-generated notes are created with your permission:

• they will only be used for the purpose explained to you;

• access will be restricted appropriately;

• they will not be used for unrelated purposes;

• they will be deleted when they are no longer reasonably necessary, subject to any legal, professional or insurance requirement that requires information to be retained.

 

A recording or transcript may form part of your client record where it is necessary to retain it for an appropriate professional, safeguarding or insurance purpose.

​

9. Communication with you

I may communicate with you by:

• email;

• telephone;

• SMS/text where necessary;

• WhatsApp - this may include written messages and, where offered, voice messages.

 

I use communication information to respond to enquiries, arrange and manage sessions, provide appropriate follow-up communication and manage the client relationship.

​

Where a WhatsApp voice message contains information relevant to your client record, it may be retained as part of that record where reasonably necessary.

​

I do not routinely retain communications indefinitely and will delete information that is no longer required, subject to applicable client-record, legal, professional or insurance retention requirements.

​

You should avoid sending highly sensitive information through ordinary messaging channels unless it is necessary to do so.

​

10. Website, Wix and online services

My website is hosted and managed using Wix.

​

Depending on the services currently enabled on my website, Wix may process information submitted through forms, subscriptions, bookings or other website functions on my behalf.

​

For example, if you submit an enquiry through my website, the information you provide may be stored within my Wix account so that I can respond to you and manage your enquiry.

​

I may introduce additional Wix functionality in future, including online booking or payment facilities. Where this happens, the relevant information will be processed for the purposes explained to you at the point of collection.

 

Wix may use its own service providers and sub-processors to provide its services. Some processing may take place outside the UK. Where personal information is transferred internationally, the appropriate safeguards required by UK data protection law will apply.

​

I will review this Privacy Policy when significant website functionality or services are introduced.

​

11. Cookies and website analytics

My website may use cookies and similar technologies.

​

Some cookies are necessary for the website to function. Other cookies, such as certain analytics or marketing cookies, may require your consent.

​

Where required, I will provide an appropriate cookie consent mechanism allowing you to make choices about non-essential cookies.

​

The exact cookies and analytics services used by my website may change as the website develops. Information about the cookies currently in use will be provided through the website's cookie information/consent mechanism.

​

12. Enquiries and marketing

If you contact me with an enquiry, I will use your contact information to respond to you and manage your enquiry.

 

Making an enquiry does not automatically add you to my marketing list. If I offer the opportunity to receive marketing emails, I will ask you to actively opt in.

​

For example, an enquiry form may contain a separate, unticked option asking whether you would like to receive occasional emails from CENTRE with Jo Myhill about services, events, useful information or offers.

​

I will keep a record of appropriate marketing consent and provide a straightforward way to unsubscribe.

​

You can withdraw your marketing consent at any time.

​

I will not assume that because you are a client, have contacted me, or have previously received information from me that you wish to receive ongoing marketing communications.

​

13. Testimonials and publication of feedback

I may ask clients whether they would like to provide a testimonial or feedback about their experience. Providing a testimonial is voluntary. I will seek separate permission before publishing a testimonial or identifying information alongside it. Unless you agree otherwise, I will normally use only your first name or initials.

​

You may withdraw permission for future use of your testimonial. Withdrawal will not affect publication or processing that took place before your withdrawal, although I will take reasonable steps to remove the testimonial from places I control where appropriate.

​

14. Working with children and young people

Where I work with children or young people under 18, I will take appropriate steps to obtain consent from a parent, carer or person with parental responsibility and to establish any information necessary for safe working.

I recognise that children and young people also have privacy rights.

​

Information will be handled in a way that respects the young person's developing understanding and right to appropriate confidentiality, while recognising that information may need to be shared where there is a safeguarding concern, risk of serious harm, legal requirement or other overriding reason.

​

Records relating to minors are retained for seven years after the young person reaches the age of 18, in accordance with my professional insurance requirements.

​

Further information about safeguarding and confidentiality may be provided separately as part of the arrangements for working with children and young people.

​

15. Who may have access to your information

I am responsible for the personal information processed by CENTRE with Jo Myhill and aim to keep access to it as limited as reasonably possible.

​

Only people who need access for legitimate business purposes should have access to client information.

​

Where another person or service provider has access to personal information on my behalf, I will take appropriate steps to ensure that confidentiality, security and any required data-processing arrangements are in place.

​

I will review access to business systems when circumstances change and will remove access when it is no longer required.

​

16. Third-party service providers

I use a limited number of external services to operate my business, which may include services for:

• website hosting and management;

• email;

• cloud storage;

• communication;

• accounting and financial records;

• online marketing;

• video meetings;

• payment processing;

• online booking.

 

These providers may process personal information on my behalf or independently for their own legitimate purposes.

I will take reasonable steps to select appropriate providers and ensure that personal information is handled in accordance with applicable data protection requirements.

​

Where a provider processes information on my behalf, appropriate contractual and security arrangements will be used where required.

​

17. Keeping your information secure

I take reasonable technical and organisational measures to protect personal information from:

• unauthorised access;

• accidental loss;

• destruction;

• alteration;

• inappropriate disclosure.

 

Electronic information is stored using password-protected systems and accounts. Paper client records are stored securely.

Access to business information is restricted and reviewed as appropriate.

​

No method of electronic or physical storage can be guaranteed to be completely secure, but I will take reasonable steps appropriate to the nature of the information I hold.

​

18. Data breaches

If I become aware of a personal data breach, I will assess what has happened and take appropriate steps to contain and address it.

​

Where required by law, I will report a qualifying breach to the Information Commissioner's Office within the applicable time frame and will notify affected individuals where required.

​

I will keep an appropriate record of personal data breaches, including those that do not require reporting to the Information Commissioner's Office.

​

19. How long I keep your information

I do not keep personal information indefinitely without reason. Different types of information may have different retention periods depending on why the information is held.

​

Client records are retained in accordance with my professional insurance and record-keeping requirements, including:

• Adults: a minimum of seven years.

• Minors: seven years after the minor reaches the age of 18.

• Vulnerable adults: potentially longer where reasonably necessary because limitation periods may be extended.

 

Financial and accounting records will be retained for the period required by applicable tax and accounting requirements.

​

Temporary recordings, transcripts, AI-generated notes and other information that is not required to form part of the permanent client record will be deleted when it is no longer reasonably necessary, subject to any applicable legal, professional or insurance requirement.

​

Marketing information will be reviewed periodically and retained only while there is a legitimate reason to do so, including where you continue to consent to receive marketing communications.

​

When information is no longer required, it will be securely deleted, destroyed or otherwise disposed of as appropriate.

 

20. Your data protection rights

Under UK data protection law, you may have rights including:

• the right to be informed about how your personal information is used;

• the right to request access to the personal information I hold about you;

• the right to request correction of inaccurate or incomplete information;

• the right to request erasure in certain circumstances;

• the right to request restriction of processing in certain circumstances;

• the right to object to certain processing;

• the right to withdraw consent where processing is based on consent;

• the right to data portability in certain circumstances.

 

These rights are subject to legal exceptions and are not all absolute. If you would like to exercise a data protection right, please contact me using the details at the beginning of this policy. I will normally respond to a valid data subject request within one month. Where permitted by law, this may be extended where a request is particularly complex or involves multiple requests. I may need to verify your identity before providing personal information.

​

21. Complaints

If you have any concerns about the way I have handled your personal information, I would encourage you to contact me first so that I have an opportunity to address your concern.

​

You also have the right to complain to the UK's independent data protection regulator: Information Commissioner's Office (ICO)

​

You can find information about making a complaint on the ICO website.

​

22. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my business, services, technology, legal requirements or the way personal information is processed.

​

The latest version will be made available on my website and will show the date on which it was last updated.

Where a change is significant, I will take reasonable steps to bring it to your attention where appropriate.