Privacy Policy

Who We Are

Iki Magic trading as Carol Macrae, Mind-Body-Magic (“We”) are committed to protecting and respecting your privacy.

This policy (together with our Website terms and conditions and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.  Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting https://carolmacrae.com or submitting any information to us, or making contact with us you are accepting and consenting to the practices described in this policy.

What Information is Collected?

Comments: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Embedded content from other websites: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Personal Information you give us

You may give us information about yourself by filling in forms on our site https://carolmacrae.com (our website) or by submitting to us digital or physical questionnaires or by corresponding with us by phone, email or otherwise. Also information disclosed and matters discussed during any consultations or therapy.

Uses made of the personal information

Clients (those who have paid for services with us):

We use information held about you in the following ways:

• to carry out our obligations arising from any contracts entered into between you and us relating to hypnotherapy, Reiki, Touch For Health Kinesiology or any other services or consultations, and to provide you with the information and services that you request from us. In other words to provide you with therapy and help you achieve your goals
• to generally improve the quality of our strategies and services for yourself and other clients. On occasion this may entail that anonymous information taken extracted from the notes or sessions will be invigilated by a professional therapist
• to provide you with information or guidance we think will be helpful to you

Enquiries (those who have contacted us and have not paid for services):

We use information to respond to enquiries, answering any questions and offering suggestions for treatment and booking appointments.

Our lawful basis to collect, process and hold data is by consent of the data subject. By submitting your personal data or contacting us, you agree and provide lawful consent to using your data in this way.

Disclosure of your information

We will not share your confidential personal identifiable information with any third parties unless we are instructed or permitted to do so by you or we are required to do so by law or in special cases, such as a physical threat to you or others. In the event that we are legally compelled to disclose your Personally Identifiable or Personal Health Information to a third party, we will attempt to notify you unless doing so would violate the law or court order. From time to time some of the information taken in the notes or sessions may be used as an example to assist others. This information will not include any personal or identifying information and remains anonymous.

Where and how we store your personal data

Any personal identifiable data from hand written therapy notes that we take will be stored in our filing cabinet in our locked office.

Any digital information collected by you completing online questionnaires via our Acuity scheduling system remain private and confidential and will never be shared with any outside persons.

Our lawful basis to collect, process and hold data is by consent of the data subject. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Unfortunately, the transmission of information via the internet and email is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Retention Period

Clients (those who have received paid for services with us):

All data may be stored indefinitely but will not be stored for a period of less than 7 years from the date of the client’s last visit to fulfil legal obligations should case notes be required by a court of law. After this time or upon death of the client, all records will be shredded and permanently disposed of or deleted.

Enquiries (those who have contacted us and have not paid for services):

All personal identifiable and contact data to be stored for 1 year, allowing enquiry sufficient time to make a decision without pressure. If after the initial 12 months the enquiry does not become a client then the data will be erased or disposed of within the next 12 months.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Your rights – access to information

The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act.

Links on our site

Our site may, from time to time, contain links to and from other websites.  If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.  Please check these policies before you submit any personal data to these websites.

Changes to our privacy policy

Any changes we may make to our privacy policy in the future will be posted on this Privacy Notice page. Please check back frequently to see any updates or changes to our privacy policy.