Privacy Policy

5236 Cheryl Logos-37

Cheryl Bass

Privacy Policy

Your privacy matters. This policy explains what personal information I collect, why I collect it, how I keep it safe and the choices you have.

1. Who I am

This website, cherylbass.com, is run by Cheryl Bass, Behavioural Business Strategist, Mentor and Clinical Hypnotherapist. For the purposes of UK data protection law, I am the “controller” of the personal information described in this policy.

If you have any questions about this policy or your information, please email cheryl@cherylbass.com.

2. The information I collect

  • When you buy from my store: your name, email address, billing address, phone number (if given) and details of what you bought.
  • When you pay: payments are processed by Stripe. I do not see or store your full card details.
  • When you book a call or session: your name, email address and any details you share when booking.
  • When you join my newsletter or waitlist: your name and email address.
  • When you work with me: notes from our mentoring or hypnotherapy sessions, and any information you choose to share about your business, goals, history or wellbeing.
  • When you visit the website: technical information such as your browser and pages visited, collected through cookies (see section 8).

3. Health and wellbeing information

Hypnotherapy, and sometimes mentoring, can involve you sharing information about your physical or mental health. This is “special category” information and I treat it with extra care. I only collect it with your explicit consent, only use it to provide your sessions safely and effectively, keep it strictly confidential and never share it unless the law requires me to, or there is a serious risk of harm to you or someone else.

4. How and why I use your information

  • To provide what you have bought, such as arranging and delivering sessions and programmes, and sending you order confirmations. (Legal basis: to perform my contract with you.)
  • To keep financial records and meet my tax and accounting obligations. (Legal basis: legal obligation.)
  • To reply to your enquiries and book curiosity calls. (Legal basis: legitimate interests, or steps before entering a contract.)
  • To send you my newsletter and news about programmes, only if you have signed up. You can unsubscribe at any time using the link in every email. (Legal basis: consent.)
  • To run and improve my website and keep it secure. (Legal basis: legitimate interests.)

I will never sell your personal information.

5. Who I share it with

I only share your information with trusted services that help me run my business, and only as much as they need:

  • Stripe, to process payments (including Link, Klarna and Amazon Pay if you choose them).
  • Calendly, to book calls and sessions.
  • Mailchimp, to send my newsletter.
  • My website host, which stores the website and its data.
  • Amazon, if you click through to buy a book. Amazon’s own privacy policy then applies.
  • My accountant, for financial records, and authorities such as HMRC where the law requires.

Some of these providers may store data outside the UK. Where they do, they use approved safeguards to protect your information.

6. How long I keep it

  • Order and payment records: six years, as required for tax purposes.
  • Session notes: for as long as we work together and for a reasonable period afterwards, then securely deleted.
  • Newsletter details: until you unsubscribe.

7. Keeping it safe

I take sensible steps to protect your information, including secure, encrypted payments, password-protected systems and limiting access to the information I hold.

8. Cookies

Cookies are small files stored on your device. My website uses essential cookies so that the shop, basket and checkout work, and to keep the site secure. Our payment provider, Stripe, also uses cookies to help prevent fraud. You can control or delete cookies in your browser settings, but the shop may not work properly without essential cookies.

9. Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how I use it, to have it transferred to you or another organisation, and to withdraw your consent at any time.

To make a request, email cheryl@cherylbass.com. I will reply within one month. There is no charge in most cases.

If you are unhappy with how I have handled your information, please contact me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

10. Changes to this policy

I may update this policy from time to time. The latest version will always be on this page.

Last updated: 9 November 2026