Privacy

How Practitioner looks after information. Last changed 19 October 2026.

In short: we use what you give us to run your account and nothing else. We don't sell information, we don't show advertising based on it, and we never post anywhere for you unless you've connected that account and switched posting on yourself. Questions: hello@practitioner.org.uk.

Who we are

Practitioner (practitioner.org.uk) is a website, booking and directory service for independent therapists, coaches and holistic practitioners in the UK, run by Peter Hallford trading as Practitioner, part of Website Designer Derby. Email hello@practitioner.org.uk, phone 07984 018749.

If you're a client of a practitioner

When you book, fill in a form or buy something on a practitioner's site, that practitioner decides what happens to your information and we look after it for them. Their own privacy page, linked at the foot of their site, explains it. We use it only to run their service: your bookings, reminders, forms and receipts. Health answers on intake forms are encrypted when stored.

We act for ourselves only in a few cases: a safety concern you send us, and directory listings of practices that aren't members. We use those only to keep people safe and to deal with complaints.

If you're a practitioner using Practitioner

What we keep

Your account: name, practice name, email, phone, town, your website's words and pictures, and your settings.
Checks you give us: qualifications, insurance, ID and DBS certificates. Old ID and DBS files are deleted automatically.
Payments: Stripe handles every card. We keep Stripe's reference numbers, never card numbers.
How you use the service: logins, emails we send for you, and what your tracked links brought in.

Why

To provide the service you signed up for (our contract with you), to keep clients safe and meet our legal duties, and to improve the service in ways you'd expect.

Who else sees it

Only the companies that help us run the service, each for its own part: our web host, Stripe for payments, our email provider, the AI services that write drafts you ask for, and Facebook, Instagram and Google if you connect them (below). Each only gets what its part needs.

Practitioners can choose to connect their own Facebook page, Instagram account and Google Business Profile, so the platform can post their news for them. This is off until they connect an account and switch it on.

What we get when you connect

Facebook: the name and number of the page you choose, and a key from Facebook that lets us post on that page. We ask for permission to see your list of pages (so you can pick one), to post on the page you pick, and to read that page's basic details. We don't read your personal profile, your friends, your messages or anyone's comments.
Instagram: the name and number of the business Instagram account linked to that page, and permission to publish posts to it. Nothing else.
Google: the name of the Business Profile you choose, and a key from Google that lets us create and remove posts on it. We don't change your listing's details, and we don't read your reviews.

What we do with it

Make drafts from your own news (group dates, offers, new pages, free guides, gift vouchers), show them to you first, and post them on the account you chose, at most once a day on each.
Keep a record of what was posted and when, so you can see it in your account.

How it's kept

The keys are encrypted before they're stored and are only ever sent back to Facebook or Google. Nobody at Practitioner can read your Facebook or Google password; you type it on Facebook's or Google's own page, never ours. Information from Google is used only for posting, in line with the Google API Services User Data Policy, including its Limited Use requirements.

Stopping it and deleting it

Press Disconnect on your Post for me page and the key is deleted straight away, with any posts still waiting. You can also remove Practitioner in Facebook's settings (Business integrations) or your Google account (Third-party connections); the key then stops working and we delete it the next time we try to use it. Posts already published stay on your page until you remove them there. Full details: deleting your Facebook, Instagram or Google information.

Visitors to practitioner.org.uk

We count page visits ourselves, without storing internet addresses or anything that identifies you. We use one cookie to keep you logged in (and, if you arrived from one of a practitioner's posters or posts, to remember which, for that visit only). There are no advertising cookies.

How long we keep it

Account information is kept while your account is open. When an account closes, the website comes down, and client records are deleted 30 days later. Some records, like payments, are kept for as long as the law needs (usually six years).

Your rights

You can ask for a copy of your information, ask us to correct it or delete it, or object to how we use it: email hello@practitioner.org.uk and we'll answer within a month. If you're unhappy with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk.

Terms for Post for me

You can only connect accounts you're allowed to post on, and you're responsible for what's posted on them, just as you are for your website.
Drafts are made from your own content. Read them before they go out (they wait 24 hours unless you choose otherwise) and keep to the same rules as your website: no promises of cures or results.
We post at most once a day on each account, between 8am and 9pm UK time, and never post anything you've skipped.
Facebook, Instagram and Google can change or stop what they allow at any time. If they do, posting may stop, and we'll tell you.
You can disconnect at any time, and it's free. Using it is part of your Practitioner membership terms.