Privacy & Cookies Policy

Effective date: 06 Aug 2026

Clean Mirror (“Clean Mirror”, “we”, “us” or “our”) operates the cleanmirror.co.uk website and provides Clean Mirror sessions and related services.

We respect your privacy and are committed to protecting your personal information.

This Privacy & Cookies Policy explains what information we collect, why we collect it, how we use and protect it, who we may share it with, and the rights you have in relation to your personal data.

For the purposes of UK data protection law, Clean Mirror is the data controller of the personal data described in this policy.

You can contact us at:

Email: katherine@cleanmirror.co.uk
Telephone: 07908 442211
Location: Wiltshire, United Kingdom

What personal information we collect

The information we collect depends on how you interact with Clean Mirror. Information you provide directly including when you contact us, make an enquiry, arrange a conversation or session, or work with Clean Mirror, we may collect information such as:

• your name;
• email address;
• telephone number;
• correspondence and enquiry details;
• appointment and scheduling information;
• billing and payment-related information;
• information you choose to provide before, during or after a session; and
• any other information you voluntarily provide to us.

Sensitive or special-category information

The nature of Clean Mirror’s work means that you may choose to discuss personal experiences, relationships, emotional patterns, physical or mental health, trauma, beliefs, sexuality or other sensitive aspects of your life.

Some of this information may constitute special-category personal data under UK data protection law.

We only ask for or retain sensitive information where it is relevant to our work together and will not intentionally collect more information than is reasonably necessary.

Where special-category information is processed, we will identify both an appropriate lawful basis under Article 6 of the UK GDPR and an appropriate condition under Article

Where appropriate, we may rely on your explicit consent to process information you voluntarily share with us.

You may withdraw consent where consent is the basis on which we process your information. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Website and technical information

When you visit our website, certain information may be collected automatically, including:

your IP address;
browser type and version;
device type;
pages viewed;
date and time of your visit;
time spent on pages;
referring website or source; and
technical or diagnostic information.
We may collect this through server logs, cookies and similar technologies.

How we use your personal information

• We may use your personal information to:
• respond to enquiries and communicate with you;
• arrange, administer and provide Clean Mirror sessions;
• manage appointments;
• maintain appropriate records relating to our work together;
• issue invoices and manage payments;
• provide administrative and customer support;
• maintain the security and functionality of our website and systems;
• understand and improve how our website is used;
• comply with legal, tax, accounting and regulatory obligations;
• establish, exercise or defend legal claims where necessary; and
• send marketing communications where you have consented to receive them or where we are otherwise permitted to do so by law.

We will not sell your personal information.

Our lawful bases for processing

Under UK data protection law, we must have a lawful basis for processing your personal information.
Depending on the circumstances, we may rely on:
Contract
Where processing is necessary to take steps at your request before working together or to provide services you have agreed to receive.
Legitimate interests
Where processing is reasonably necessary for the operation of Clean Mirror, for example responding to enquiries, administering the business, maintaining records, protecting our systems or dealing with legal matters, provided those interests are not overridden by your rights and interests.
Legal obligation
Where we need to process or retain information to comply with a legal requirement, including tax and accounting obligations.
Consent
Where you have given us a clear choice and agreed to a particular use of your personal information, for example certain marketing communications or non-essential cookies.
You can withdraw consent at any time where consent is the lawful basis being relied upon.

Confidentiality

The personal nature of Clean Mirror’s work is recognised and treated with care.

• Information you share in connection with sessions will not normally be disclosed to third parties unless:
• you have asked or authorised us to do so;
• disclosure is necessary to provide or administer the service and an appropriate service provider is involved;
• we are legally required to disclose it;
• disclosure is necessary to establish, exercise or defend legal rights; or
• there is another lawful basis requiring or permitting disclosure.
• Where third-party providers process personal data on our behalf, we take reasonable steps to ensure appropriate contractual and confidentiality arrangements are in place.

Service providers

We may use trusted third parties to help operate Clean Mirror. Depending on how you interact with us, these may include providers of:

• website hosting and maintenance;
• website contact forms;
  email;
• appointment scheduling;
• online video meetings, including Zoom;
• invoicing, accounting or bookkeeping;
• payment or banking services;
• secure data storage and backups;
• IT and cybersecurity services; and
• website analytics, where enabled.

These providers may process personal information only to the extent necessary to provide their services to us and subject to their own legal and contractual obligations.
We periodically review the providers we use.

Payments

Where you pay for Clean Mirror services, payment information may be handled by a bank, payment service provider or other financial service provider.
We do not need to retain your full debit or credit card details where payments are processed directly by a third-party payment provider.
We may retain invoices, transaction references and other accounting information where required for business, tax and legal purposes.

Retention of your information

We do not keep personal information for longer than reasonably necessary.

How long information is retained depends on:

• the reason it was collected;
• whether you become or remain a client;
• the nature and sensitivity of the information;
• our legal, accounting and tax obligations;
• any applicable limitation periods;
• the need to resolve disputes or respond to complaints; and
• whether continued retention is otherwise necessary and proportionate.
• When information is no longer required, we will delete it, securely dispose of it or anonymise it where appropriate.

 

Security

We take reasonable technical and organisational measures to protect personal information from unauthorised access, disclosure, alteration, loss or destruction.
These measures may include access controls, password protection, appropriate device and account security, secure service providers, backups and minimising the amount of information retained.
No method of electronic transmission or storage is completely secure, so absolute security cannot be guaranteed.

 

International transfers

Some technology and service providers may process or store information outside the United Kingdom.
Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate lawful transfer mechanism and safeguards are in place as required by UK data protection law. Depending on the destination and provider, this may include UK adequacy regulations or approved contractual safeguards.

Your data protection rights

Depending on the circumstances and the lawful basis for processing, you may have rights including:
the right of access - to ask for a copy of personal information we hold about you;

• the right to rectification - to ask us to correct inaccurate or incomplete information;
• the right to erasure - to ask us to delete personal information in certain circumstances;
• the right to restriction - to ask us to restrict how information is used in certain circumstances;
• the right to object - to object to certain processing, including processing based on legitimate interests;
• the right to data portability - to receive certain information in a structured, commonly used and machine-readable form where applicable; and
• the right to withdraw consent — where we rely on your consent.

These rights are not absolute and may not apply in every circumstance.

To exercise any of these rights, contact katherine@cleanmirror.co.uk.

We may need to verify your identity before responding to a request.

Complaints

If you have concerns about the way we handle your personal information, please contact us first so that we have an opportunity to resolve the matter.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

Marketing communications

We may occasionally send information about Clean Mirror that we believe may be relevant to you where we have an appropriate lawful basis to do so.

Where your consent is required, we will obtain it before sending marketing communications.
You can stop receiving marketing communications at any time by using an unsubscribe option included in the communication, where available, or by contacting us.

Opting out of marketing will not prevent us from sending service-related or administrative messages where necessary.

Cookies

What are cookies?

Cookies are small files or pieces of information placed on or accessed from your computer, mobile phone or other device when you use a website.

Websites use cookies and similar technologies for purposes such as operating securely, remembering preferences, understanding website use and, where applicable, analytics or marketing.

Cookies used by Clean Mirror

The Clean Mirror website may use the following categories of cookies or similar technologies:

Strictly necessary cookies
These are required for the website to operate correctly or securely and may include cookies needed to remember your privacy or cookie preferences.
These cookies do not normally require consent where they are genuinely necessary to provide the website or a feature you have requested.
Functional cookies
These may be used to remember choices you make or enable additional website functionality.
Where consent is legally required, these cookies will not be activated unless you choose to accept them.
Analytics cookies
If analytics services are enabled, these may help us understand how visitors use the website, for example which pages are visited and how people navigate through the site.
Where consent is required, analytics cookies will not be placed or accessed until you have given that consent.

Marketing or tracking cookies

If Clean Mirror uses advertising, remarketing, embedded social-media tracking or similar technologies, these may be used to measure campaigns or understand activity across websites.
Where consent is required, these technologies will not be activated until you have chosen to accept them.

Cookie consent and choices

Where consent is required for a cookie or similar technology, you should be given a genuine choice before that technology is activated.

You can accept or reject non-essential cookies through the cookie controls provided on the website, where applicable.
You can also control or delete cookies through your browser settings. Blocking some cookies may affect the way certain website features work.

You can change or withdraw your cookie consent at any time using the website’s cookie settings, where available.

Third-party websites and services

Our website may contain links to websites or services operated by other organisations.
We are not responsible for the privacy practices of websites we do not operate. If you follow an external link, you should review the privacy information provided by that organisation.
Similarly, third-party services used for appointments, video calls or other functionality may have their own privacy policies governing information you provide directly to them.

Children

Clean Mirror’s services are intended for adults.
We do not knowingly use the website to collect personal information from children. If you believe that a child has provided personal information to us inappropriately, please contact us so that we can investigate and, where appropriate, delete the information.

Changes to this policy

We may update this Privacy & Cookies Policy from time to time to reflect changes to our services, technology, service providers or legal obligations.

When we make changes, we will publish the revised policy on the website and update the effective date shown at the top.

We recommend reviewing this page periodically.

Contact us

If you have any questions about this Privacy & Cookies Policy, how we use your personal information, or your data protection rights, please contact:

Clean Mirror
Email: katherine@cleanmirror.co.uk
Telephone: 07908 442211
Location: Wiltshire, United Kingdom