Privacy Policy

May 26, 2026

Legal Notice, Privacy Policy & Cookie Policy

This page covers three things: who's behind this website, how I handle your data, and what cookies are used. If you have questions, use the contact page.

1. Legal Notice / About This Site

This website is operated by:

Nicolas Ullah [30 N Gould St, Sheridan, WY] Contact: ullah.nicolas@gmail.com

Professional credentials:

  • Level 5 Diploma in Cognitive Behavioural Hypnotherapy — UK College of Hypnosis & Hypnotherapy

  • MSc Psychology — London Metropolitan University

  • Registered Practitioner — General Hypnotherapy Register / National Council for Hypnotherapy [whichever applies]

Scope of practice notice: I am a CBH Practitioner and Mental Performance Coach. I am not a clinical psychologist, psychotherapist, or licensed therapist. My MSc in Psychology informs my coaching methodology; it does not entitle me to use protected titles such as "Psychologist" or "Therapist." Clients with clinical mental-health needs are referred to appropriate licensed professionals.

2. Privacy Policy

2.1 What data I collect

When you interact with this site or my services, I may collect:

  • Contact information: name, email address, professional context

  • Session-related data: intake questionnaire responses, session notes, audio recordings (only with explicit written consent)

  • Payment information: processed by Stripe; I do not store credit card details

  • Usage data: site analytics (anonymized) and form submissions

2.2 How I collect data

  • Forms on this website (newsletter signup, free audio download, contact form, discovery call booking)

  • Direct communication via email, voice notes, or WhatsApp

  • Session intake questionnaires

  • Payment processing (via Stripe)

2.3 Why I collect data

  • To deliver coaching and CBH services you've booked

  • To send the newsletter you've subscribed to (Inner Game Notes)

  • To respond to your enquiries

  • To maintain accurate clinical records (where applicable)

  • To comply with professional and legal requirements

2.4 Who I share data with (sub-processors)

I use the following third-party services to operate my practice. Each has its own privacy policy:

  • Kit (formerly ConvertKit) — email newsletter delivery

  • Stripe — payment processing

  • Cal.com / TidyCal — appointment scheduling

I do not sell, rent, or trade your personal data to third parties for marketing purposes.

2.5 Your rights (GDPR)

If you're in the EU/UK, you have the right to:

  • Access the personal data I hold about you

  • Correct inaccurate data

  • Delete your data ("right to be forgotten") — subject to legal record-keeping obligations

  • Export your data in a portable format

  • Object to specific processing

  • Withdraw consent at any time

2.6 Data retention

  • Newsletter subscriber data: retained until you unsubscribe

  • Session notes and clinical records: retained for 7 years from final session, per professional indemnity insurance and standard clinical practice

  • Payment records: retained for 6 years per tax law

  • Website analytics: anonymized; retained for 26 months

2.7 Security

Client data is stored in GDPR-compliant systems with encryption at rest. Session recordings (when consented to) are stored on encrypted cloud storage and deleted within 30 days of the session unless otherwise agreed.

3. Terms of Service

3.1 Scope of services

I provide coaching and cognitive-behavioural hypnotherapy services to individual adult clients. Services are delivered via 1:1 online sessions (Zoom) and, where specified, in person.

This is coaching and hypnotherapy — not psychotherapy, clinical psychology, or therapy. If you are experiencing significant mental-health symptoms (clinical depression, PTSD, suicidality, an eating disorder, or similar), you should consult a licensed clinical practitioner, not me. I will refer you appropriately.

3.2 No outcome guarantees

I do not guarantee specific psychological, performance, or life outcomes from my services. Mental performance work depends on client engagement, life circumstances, and many factors outside session walls. What I do guarantee is the process — see refund policy below.

3.3 Refund and cancellation policy

Sessions:

  • Sessions can be rescheduled with 24+ hours' notice at no charge.

  • Sessions cancelled with under 24 hours' notice are forfeited.

  • Single Sessions are non-refundable once delivered.

Multi-session packages (Foundations, Pressure Reset, Performance Retainer):

  • If after Session 4 the work isn't landing meaningfully for you, the remaining sessions in the package are refunded — no questions asked. (Foundations refund applies after Session 2.)

  • Refunds are prorated for sessions delivered.

  • Refunds are processed within 14 business days.

Elite Retainer: custom refund terms negotiated as part of the engagement letter.

Audio products: Digital audio products are non-refundable once delivered, due to their downloadable nature.

3.4 Confidentiality

All session content is confidential. I do not share client information with third parties without explicit written consent, except where required by law (e.g., subpoena, court order, mandatory reporting of imminent harm).

3.5 Intellectual property

All audio protocols, written materials, and methodology shared as part of your engagement remain my intellectual property. They are licensed to you for personal use only. You may not reproduce, distribute, or commercially exploit these materials.

3.6 Limitation of liability

To the maximum extent permitted by law, I am not liable for indirect, incidental, or consequential damages arising from the use of my services. My total liability is limited to the amount you paid for the specific service in question.

3.7 Governing law

These terms are governed by the laws of Sheridan, WY. Any disputes will be resolved in the courts of WY.

4. Cookie Policy

4.1 What cookies I use

This site uses the following cookies:

  • Essential cookies: required for the site to function (e.g., session state, form submissions)

  • Analytics cookies: anonymized site usage data via [Plausible / Google Analytics 4]

  • Third-party embed cookies: when you interact with embedded forms (Kit signup, Cal.com booking, Stripe checkout), those services may set their own cookies

I do not use advertising or tracking cookies.

4.2 How to manage cookies

You can manage cookies through your browser settings. Disabling cookies may affect site functionality. The first time you visit this site, you'll see a cookie consent banner where you can accept or reject non-essential cookies.

4.3 Third-party services with their own cookies

Contact: For privacy questions, data requests, or anything else, email ullah.nicolas@gmail.com.

Updates: This document is updated periodically. The "Last updated" date at the top reflects the most recent revision.