top of page

Privacy Policy

Last updated: 08 August 2026

​

This Privacy Policy explains how Ivana Mogin ("I", "me", "my") collects, uses, and protects your personal information when you visit ivanamogin.com, contact me, or book a Cranio-Sacral Therapy session. I offer sessions in Paris and London, so this policy is written to comply with both the EU General Data Protection Regulation (GDPR) and the UK GDPR / Data Protection Act 2018.

​

I take your privacy seriously, and I am especially mindful that information about your health is sensitive. I collect only what I need to offer you safe, considered care.

​

  1. Who is responsible for your data I am the data controller responsible for your personal information. Name: Ivana Mogin Email: contact@ivanamogin.com

  2. What information I collect Depending on how you interact with me, I may collect:

  • Contact details: your name, email address, phone number, and any message you send through the contact or booking form.

  • Booking information: the service you book, your chosen location (Paris or London), and appointment dates and times.

  • Health information: relevant details about your health, history, symptoms, and wellbeing that you share with me before or during a session, and any notes I keep to support your care. This is "special category" data and is treated with additional care.

  • Website data: basic technical information collected automatically by my website provider, such as your approximate location, device and browser type, and how you use the site (see "Cookies" below).

​

3. How I collect it I collect information directly from you — when you fill in a form, email or message me, book a session, or talk with me during an appointment. Some website data is collected automatically through cookies and similar technologies used by my website platform.

4. Why I use your information, and my legal basis I use your information to:

  • respond to your enquiries and arrange appointments (legal basis: to take steps at your request before entering into, and to perform, our agreement);

  • provide and record your care safely (legal basis: your explicit consent, and my legitimate interest in keeping accurate records);

  • manage my practice, including invoicing and accounts (legal basis: legal obligation and legitimate interest);

  • keep you informed about your appointments (legal basis: our agreement).

​

Because health information is sensitive, I rely on your explicit consent to collect and keep it[, and/or on the basis that it is necessary for the provision of health care by a health practitioner]. You can withdraw your consent at any time (see "Your rights").

​

5. Who I share it with I do not sell your personal information, and I do not share it for marketing. I share it only where necessary:

  • Website and booking platform: my website and online booking run on Wix. Wix processes data on my behalf as a service provider, including form submissions and booking details.

  • Professional and legal requirements: I may share information where I am legally required to, or with your consent (for example, with another health professional involved in your care). [- Other tools you use, e.g. an email or accounting provider — list here

 

6. Where your data is held My website platform (Wix) may store and process data on servers located outside France and the United Kingdom, including outside the European Economic Area. Where this happens, appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your information.

​

7. How long I keep it I keep your information only for as long as necessary:

  • Enquiries that don't lead to a booking: 12 months.

  • Booking and contact records: for the duration of our working relationship and 7 years afterwards.

  • Health records: I keep these for 7 years after your last session, in line with professional and insurance requirements. For children, records are kept until they reach the age of 18 plus 5 years. After these periods, I securely delete or anonymise your information.

 

8. Cookies My website uses cookies — small files stored on your device. Some are essential for the site to work; others help me understand how the site is used. You can control non-essential cookies through the consent banner when you first visit, and through your browser settings. [If you use analytics, name it here.]

 

9. Your rights Under GDPR and UK GDPR, you have the right to:

  • access the personal information I hold about you;

  • ask me to correct information that is inaccurate or incomplete;

  • ask me to delete your information (in certain circumstances);

  • ask me to restrict or object to how I use it;

  • request a copy of certain data in a portable format;

  • withdraw your consent at any time, without affecting care already provided. To exercise any of these, please contact me at contact@ivanamogin.com. I will respond within one month.

 

10. How to make a complaint I hope to resolve any concern you raise with me directly. You also have the right to complain to a supervisory authority:

  • In France: the CNIL (Commission Nationale de l'Informatique et des Libertés) — www.cnil.fr

  • In the UK: the ICO (Information Commissioner's Office) — www.ico.org.uk

 

11. Changes to this policy I may update this policy from time to time. The current version, with its date, will always be available on this page.

​

Contact : If you have any questions about this policy or your information, please contact me at contact@ivanamogin.com.

bottom of page