Legal

Privacy Policy

Last updated: May 2026. This policy reflects the Data (Use and Access) Act 2025, in force from 5 February 2026, and the UK GDPR.

This policy explains how Diane Beck, trading as DEB Method Ltd, collects, uses and protects your personal data. We take your privacy seriously and handle your data with the same care and respect we bring to all our work.

Who we are

Data Controller: DEB Method Ltd
Trading as: Diane Beck Coaching and The Truth Codes
Contact: [email protected]
Website: thetruth.codes and dianebeck.org

We are registered with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

What personal data we collect

Depending on how you interact with us, we may collect:

Your name and email address when you enquire, book or sign up to our list
Payment information processed securely through third party providers
Information you share during coaching, hypnotherapy or assessment sessions
Technical data such as IP address, browser type and pages visited, collected automatically when you use our websites
Communications you send to us by email or through contact forms

Why we collect your data and our lawful basis

We collect and process your data under the following lawful bases as defined under the UK GDPR and updated by the Data (Use and Access) Act 2025:

Contract: To deliver coaching, hypnotherapy and other services you have engaged us for
Consent: To send you emails, updates or marketing where you have explicitly opted in. You may withdraw consent at any time.
Legitimate interests: To improve our services, respond to enquiries and maintain our business records, where this does not override your rights
Legal obligation: To comply with financial record-keeping and other legal requirements

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

Special category data

As a clinical hypnotherapist and coach, some information you share with us during sessions may constitute special category data under UK GDPR, including health, mental health or emotional wellbeing information. This data is processed only with your explicit consent and handled with the highest level of confidentiality, in line with professional therapeutic standards.

Session notes are stored securely and separately from general contact records. We retain clinical session records for a minimum of 3 years after our last contact, and financial records for 6 years, in line with legal requirements and professional guidance.

How we store and protect your data

Your data is stored securely using the following measures:

Encrypted cloud storage through GDPR-compliant platforms
Access limited strictly to authorised personnel
Secure password management and two-factor authentication
Regular review of data held and deletion of data no longer needed

Third parties we work with

We use the following third party platforms to deliver our services. Each is contractually bound to handle your data in compliance with UK GDPR:

Go High Level (GHL) — CRM, email marketing, course delivery and booking
Stripe or similar — payment processing (we do not store your card details)
Google Workspace — email and document storage
Zoom or similar — video session delivery

We do not sell your personal data to any third party under any circumstances.

International data transfers

Some of our third party providers are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions, in line with the updated international transfer framework under the Data (Use and Access) Act 2025.

Cookies

Our websites use essential cookies required for basic functionality. Where we use any analytics or tracking cookies, we will ask for your consent before placing them. You can manage your cookie preferences at any time through your browser settings.

Under the Data (Use and Access) Act 2025, certain strictly necessary cookies do not require consent. We will always be transparent about what we use and why.

Your rights

Under the UK GDPR you have the following rights:

Right of access — request a copy of the personal data we hold about you
Right to rectification — ask us to correct inaccurate or incomplete data
Right to erasure — ask us to delete your data, subject to legal retention obligations
Right to restriction — ask us to limit how we process your data
Right to portability — receive your data in a portable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to complain — under the Data (Use and Access) Act 2025, you have a right to raise a complaint with us directly. We will acknowledge your complaint within 30 days.

To exercise any of these rights, please contact us at [email protected]. We will respond without undue delay and within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

Marketing communications

We will only send you marketing emails if you have explicitly opted in. Every email we send includes an unsubscribe link. You can withdraw your consent at any time by clicking unsubscribe or emailing us directly.

Changes to this policy

We review this policy regularly and will update it to reflect any changes in our practices or the law. The date at the top of this page shows when it was last updated. We will notify you of any significant changes by email where we hold your address.

Contact us

If you have any questions about this policy or how we handle your data, please contact:

Diane Beck, DEB Method Ltd
[email protected]