Privacy Policy
Last updated: 15th October 2026
At Iron & Grace Method, your privacy is important to me. This Privacy Policy explains how I collect, use and protect your personal information when you visit my website or use my services.
Who I am
Iron & Grace Method
Rebecca Hickman
Email: irongracemethod@outlook.com
Website: www.irongracemethod.com
I am the Data Controller responsible for your personal information.
What information I collect
Depending on the services you use, I may collect:
- Name
- Address
- Email address
- Telephone number
- Date of birth
- Emergency contact details
- GP details
- Health and wellbeing information relevant to your sessions
- Information you provide in questionnaires, forms or emails
- Payment information (processed securely through third-party payment providers)
How I use your information
Your information is collected to:
- Respond to your enquiries
- Arrange appointments
- Deliver coaching and hypnotherapy services
- Tailor sessions to your individual needs
- Maintain accurate client records
- Contact you regarding appointments or services
- Meet legal and professional obligations
I will only collect information that is necessary for providing my services.
Health information and your consent
Health information is sensitive personal information. With your explicit consent, Rebecca Hickman, trading as Iron & Grace Method, collects and uses the physical and mental health information you choose to provide to assess whether services are appropriate, plan and deliver your sessions or programme, and maintain relevant client records.
For information necessary to provide an agreed service, the UK GDPR lawful basis is performance of a contract. The additional condition for using your health information is your explicit consent.
You can withdraw your consent at any time by emailing irongracemethod@outlook.com. Withdrawal does not affect the lawfulness of information used before you withdrew consent. Without relevant health information, it may not be possible to begin or continue a service safely.
Following withdrawal, health information will only be retained where there is a separate lawful basis and an applicable legal condition permitting its retention. Rebecca will explain any applicable retention requirements when responding to your request.
Confidentiality
Everything you share with Iron & Grace Method is treated confidentially.
Information will only be shared if:
- You give written permission.
- I am legally required to do so.
- There is a concern that you or another person may be at serious risk of harm.
How your information is stored
Your information is stored securely using password-protected systems and secure cloud services where appropriate.
I take reasonable steps to protect your information from unauthorised access, disclosure or loss.
How long I keep your information
Adult client consultation, consent and session records are kept securely for seven years after your last session, in line with my professional insurance requirements.
For clients under 18, these records are kept until at least their 25th birthday, and longer if needed to cover seven years after their last session.
Records may be retained longer for an ongoing complaint, legal claim or another applicable legal requirement. Records are reviewed and securely deleted or destroyed when no longer needed.
Your rights
Under UK GDPR you have the right to:
- Request access to your personal information.
- Request correction of inaccurate information.
- Request deletion of your information where appropriate.
- Withdraw consent where consent is the legal basis for processing.
- Make a complaint to the Information Commissioner's Office (ICO).
For more information visit:
Cookies
This website may use cookies to improve your browsing experience and analyse website traffic.
You can manage cookie preferences through your browser settings.
Contact
If you have any questions regarding this Privacy Policy or how your information is handled, please contact:
Rebecca Hickman
Iron & Grace Method
📧 irongracemethod@outlook.com