Privacy

Below is the official privacy policy. You should read it in full but here’s the TL;DR: I do of course have to work with 3rd parties such as my hosting company, payment processors, mail processors and so on in order to operate, and they have their own privacy policies. Beyond that, where I’m concerned I do not and I will not divulge your information to anyone, unless forced to by law.

Most boilerplate privacy policies claim “we care about your privacy” – I really do.

Alan

Privacy Policy

Privacy Policy

Last updated: 29 October 2025

This page explains what information we collect on this website, how we use it, how it is stored, and what choices you have.

Who we are
Alan Carr, my company is APC Online, based in Malaysia. – online hypnotherapy focused on compulsive shopping and overspending.
Website
AlanCarrOnline.com
Hosting
SiteGround (servers may be located outside your country).

What we collect

We collect only what is needed to run the site, respond to you, and deliver services you request.

  • Contact forms (Contact Form 7): name, email, and your message. Submitted data is stored in our WordPress database and emailed to us so we can reply.
  • Emails: if you email us directly, we will store your message and our replies in our email client for record-keeping.
  • Quiz usage: the on-site quiz runs in your browser. We do not store your answers unless you choose to send them with a contact form or booking request.
  • Bookings and payments: if you book and pay via Stripe or PayPal, payment details are processed by those providers. We do not see or store your full card details.
  • Technical data: standard web logs and cookies that help the site function and help us understand traffic in aggregate. This includes the usual Google Analytics that most websites use, without revealing your identify to us.

How we use your information

  • To reply to inquiries and provide the services you request.
  • To schedule calls or sessions you book with us.
  • To operate and improve the website, including basic analytics.
  • To meet legal, tax, or accounting obligations where applicable.

Legal bases we rely on

  • Contract: providing consultations and services you request.
  • Legitimate interests: site security, troubleshooting, and basic analytics.
  • Consent: where we ask for it (for example, optional cookies or mailing list sign-up, if used).
  • Legal obligation: compliance with laws and regulations.

How long we keep data

  • Contact form submissions and emails: as long as needed to handle your request, then archived or deleted on a rolling basis.
  • Client records: kept as required by law in our jurisdiction, then deleted.
  • Payment records: retained as required for accounting and tax compliance.
  • Cookies: see cookie lifetimes below.

Sharing and transfers

We do not sell your data. We share data only with trusted processors that help us run the site and deliver services, or where required by law.

  • Site hosting: SiteGround.
  • Email: our email service provider and local email client.
  • Payments: Stripe and/or PayPal process payment info on their systems.
  • Embedded media: YouTube or similar, only if you play an embedded video. The media provider may set its own cookies.
  • Analytics: We use privacy-respecting, aggregate analytics. We do not use invasive tracking.
International transfers. Our providers may store or process data on servers in other countries. Where required, we use providers with appropriate safeguards in place.

Your choices and rights

You can ask us to:

  • Provide a copy of data we hold about you.
  • Correct inaccurate information.
  • Delete your personal information, where applicable.
  • Limit or object to certain processing.

To make a request, use the Contact page on this website. We may need to verify your identity before acting on a request.

Cookies

Cookies are small files stored on your device to keep the site working and help us understand usage. You can block cookies in your browser settings. Blocking some cookies may affect site features.

CookiePurposeTypical duration
wp_* (functional)Remembers basic site preferences and logged-in admin sessions.Session to 1 year
cf7_* (functional)Helps Contact Form 7 verify submissions and reduce spam.Session
_ga / _gid (analytics, if enabled)Anonymous, aggregate stats on page views and traffic.24 hours to 2 years
youtube.com cookies (only if you play an embed)Remember playback settings and measure performance.Session to 2 years

Children

This site and our services are intended for adults. We do not knowingly collect personal data from children.

Security

We use SSL, reputable hosting, strong account security, and keep WordPress, themes, and plugins updated. No method of storage or transmission is perfectly secure, but we aim for sensible, proportionate protections.

Changes to this policy

We may update this policy from time to time. The date at the top shows the latest version. Significant changes will be reflected on this page.

How to contact us

For privacy questions or requests, use the Contact form


Notes for transparency: this policy aims to be clear and readable. It does not waive any legal rights you may have in your jurisdiction.