1. Your privacy matters to me

Your privacy, trust and confidentiality are extremely important to me. I’m Magda Wright, a fertility coach, homeopath and Rapid Transformational Therapy (RTT) practitioner. Through Magda Wright Ltd, including my Fertile Mind Body and fertilemind trading names, I offer individualised  coaching, homeopathy and mind-body support. This policy explains how I collect, use, store and protect personal information, and your rights under UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

2. Who is responsible for your information?

Magda Wright Ltd is the data controller responsible for personal information collected in connection with my services, including services offered under the trading names Fertile Mind Body and fertilemind. Website: https://magdawright.com. Email: info(at)magdawright.com. Please contact me with any questions about your personal information.

3. What information do I collect?

Personal and contact details: your name, email address, telephone number, booking details and correspondence.

Consultation information: information you choose to share about fertility, menstrual cycles, pregnancy history, physical health, emotional wellbeing and related matters. I make handwritten consultation notes and do not routinely request or retain medical reports, scans or laboratory results.

Payment and booking information: services purchased, appointment dates, payment amounts and transaction records. Stripe and PayPal process card payments; I do not store full payment card details.

Website and marketing information: subscription preferences, email engagement information, cookie identifiers, device details and website usage information where applicable.

4. Why do I use your information?

To respond to enquiries; arrange and provide consultations and coaching; keep appropriate client records; process bookings and payments; meet tax and accounting obligations; send essential service communications; send marketing where permitted; understand and improve website performance; and protect my business and handle professional or legal matters. I seek to collect only information reasonably necessary for these purposes.

5. Lawful bases and sensitive health information

Depending on the activity, my lawful bases under Article 6 UK GDPR are: contract (providing booked services); legal obligation (such as tax records); legitimate interests (handling enquiries, running and protecting the business, where balanced against your rights); and consent (where required for marketing or non-essential tracking).

Health and fertility information, including what you tell me in consultations, is special category data and requires a separate Article 9 condition as well as an Article 6 lawful basis. Where explicit consent under Article 9(2)(a) is the appropriate condition, I will obtain it separately and explain its scope. Where another lawful condition applies, I will document that condition. You can withdraw consent at any time; withdrawal does not invalidate earlier lawful processing, and certain records may be retained where another lawful basis and Article 9 condition permit this.

6. Client records and confidentiality

Consultation and session notes are handwritten, not maintained as electronic session notes, and stored securely in a locked filing cabinet. I treat information shared during consultations as confidential and disclose it only where there is an appropriate lawful basis, including where disclosure is legally required or permitted.

In line with Homeopathy International (HINT) professional record-keeping guidance, consultation and session notes are normally retained for SIX YEARS from the date of your last appointment, subject to any longer period required by my professional indemnity insurer or applicable law. At the end of that period they are securely destroyed by shredding, unless continued retention is justified.

7. Microsoft Forms

I may use Microsoft Forms to collect information before an appointment. Responses are initially processed electronically by Microsoft. I print completed forms when needed and securely store the paper copies with client records. I then delete electronic responses once no longer required, subject to relevant retention obligations and Microsoft’s applicable backup and deletion processes. Access is restricted appropriately.

8. Zoom consultations and recordings

I use Zoom for online appointments. Zoom may process meeting and participant details and content you choose to share. Occasionally I record sessions, for example to provide an agreed personalised RTT recording, but only with your prior agreement. Access to any cloud recording is restricted. Recordings are normally deleted from my Zoom cloud account within seven days, or earlier once downloaded, unless another arrangement is agreed. You are responsible for securing copies supplied to you.

9. Appointment bookings

I use Acuity Scheduling to arrange appointments, send confirmations and reminders, and manage bookings. Acuity may process contact, appointment and relevant payment information.

10. Payments

Stripe and PayPal process payments under their respective privacy arrangements. I retain necessary transaction and accounting information but do not store full payment card details.

11. Emails and newsletters

I use ActiveCampaign for email marketing and customer relationship management. Where permitted, I may send information, resources, updates and offers. You can unsubscribe from marketing emails at any time using the link in the email or by contacting me. This does not stop essential communications about services you have requested. ActiveCampaign may process delivery, open and click information subject to applicable rules. I do not sell your personal information.

12. Cookies and website tracking

My website may use essential cookies, Google Analytics and Meta (Facebook) Pixel to operate the website, measure usage and assess advertising. These tools may collect identifiers, device and browser information and website activity. Where consent is legally required, non-essential cookies and tracking will not be activated before consent. You can manage preferences through the website’s cookie controls. See https://magdawright.com/cookie-policy/ for further information.

13. Third-party providers

I use ActiveCampaign, Acuity Scheduling, Zoom, Microsoft Forms, Stripe, PayPal, Google Analytics and Meta Pixel, and may use website hosting and technical support providers. They may act as processors or independent controllers depending on the service. I take reasonable steps to ensure appropriate data protection arrangements. I do not sell or rent personal information.

14. International clients and transfers

I work with clients in the UK and internationally. Some providers may process personal information outside the UK. Where UK law applies to an international transfer, an appropriate mechanism is required. Depending on provider and destination, this may involve UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework for eligible organisations, an International Data Transfer Agreement or a UK Addendum to standard contractual clauses. You may contact me for details of applicable safeguards.

15. How long do I keep information?

Consultation and session notes: normally SIX YEARS after the last appointment, subject to insurance and legal requirements.

Financial and transaction records: normally six years or longer if applicable tax, accounting or legal rules require.

Microsoft Forms: electronic responses deleted after printing when no longer required, subject to provider backup and deletion arrangements.

Zoom cloud recordings: normally deleted within seven days or earlier once downloaded, unless otherwise agreed.

Marketing records: while subscribed or otherwise needed, with limited suppression records retained to respect opt-outs.

Enquiries, bookings and correspondence: for as long as reasonably necessary for administration, legal obligations or potential disputes. I periodically review records and dispose of them securely when no longer required.

16. Information security

I use reasonable technical and organisational safeguards, including a locked filing cabinet for paper notes, restricted access to client information, appropriate account security for online services, and secure shredding of paper records. No system can guarantee absolute security.

17. Your data protection rights

Subject to applicable conditions and exemptions, you may request access, correction, erasure, restriction, data portability, and object to certain processing. You may withdraw consent where processing relies on it, and object to direct marketing at any time. Rights also apply in relation to certain solely automated decisions with legal or similarly significant effects. I do not use consultation information for such automated decisions. Email info(at)magdawright.com to make a request. I normally respond within one month, subject to applicable rules and identity verification.

18. Data protection complaints

If you are concerned about my handling of personal information, contact info@magdawright.com. I will acknowledge a data protection complaint within 30 days, investigate it appropriately and communicate the outcome without undue delay. You can also complain to the Information Commissioner’s Office (ICO): https://ico.org.uk, telephone 0303 123 1113. Complaints about professional conduct may be referred to Homeopathy International (HINT) under its procedures: https://hint.org.uk.

19. External links and embedded content

My website may link to external websites or include embedded content. Those services may use cookies and collect information under their own privacy policies. Please review their policies when visiting them.

20. Changes to this policy

I may update this policy to reflect legal, professional or operational changes. The latest version will be published on my website with its update date. For questions, email info(at)magdawright.com.