Quit With Greg Privacy Policy
Last updated: August 2026
Quit With Greg respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, store and protect your data when you enquire about, book or receive smoking or vaping cessation support, including hypnotherapy sessions delivered online or in person.
Quit With Greg is a trading name of Greg Nejedly, a sole trader. For data protection purposes, the data controller is Greg Nejedly trading as Quit With Greg.
This policy is designed to comply with the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations, and applicable UK data protection updates in force from June 2026.
1. Who we are
Business name: Quit With Greg
Legal trading identity: Greg Nejedly trading as Quit With Greg
Data Controller: Greg Nejedly
Contact: hello@quitwithgreg.co.uk
Address: 40 Court Rd, Malvern, Worcester WR13 3BP
ICO registration number: ZB197690
Greg Nejedly is the data controller for personal data collected through Quit With Greg. This means he decides why and how your personal information is used.
Where trusted third-party services are used, such as booking systems, payment providers, email platforms, website hosting, analytics, video consultation tools or accountants, those providers may act as data processors. They may only process your data according to instructions from Greg Nejedly trading as Quit With Greg and must use appropriate security measures.
2. What information we collect
We may collect the following information:
- Identity details: name and, where relevant, age or date of birth.
- Contact details: email address, phone number and address.
- Health and lifestyle information: smoking or vaping history, nicotine use, triggers, previous quit attempts, relevant medical history, medication, mental wellbeing information, pregnancy status where voluntarily shared, and other information relevant to suitability and support.
- Session records: intake forms, consultation notes, goals, progress notes and aftercare information.
- Appointment information: bookings, attendance, cancellations and communications.
- Payment information: invoices, payment confirmation and limited transaction records. We do not intentionally store full card details.
- Website data: IP address, device information, cookie choices and analytics data where enabled.
- Marketing preferences: whether you have opted in or out of emails or other marketing.
3. Why we use your information
We use your data to:
- respond to enquiries and assess whether our service is suitable for you;
- book, manage and deliver smoking or vaping cessation sessions;
- keep accurate and confidential professional records;
- process payments, invoices and tax records;
- respond to complaints, legal issues, insurance matters or safeguarding concerns;
- send marketing only where you have opted in or where the law allows;
- keep our website, systems and services secure.
4. Lawful basis for processing
We rely on the following lawful bases under Article 6 UK GDPR:
- Contract: to respond to enquiries, book appointments and provide services.
- Consent: for optional marketing and, where appropriate, health-related information.
- Legal obligation: for accounting, tax and legal record keeping.
- Legitimate interests: to manage our business, improve services, maintain security and protect legal rights, provided your rights do not override those interests.
Health, wellbeing and smoking or vaping cessation information may be special category data under Article 9 UK GDPR. Where we process this information, we rely on Article 9(2)(a): explicit consent, unless another lawful condition applies, such as legal claims or safeguarding.
5. Explicit consent for health and cessation data
Before working with you, we will ask you to actively confirm your consent using wording such as:
“I explicitly consent to Greg Nejedly trading as Quit With Greg collecting, using and securely storing my health, wellbeing, smoking, vaping and session information for the purpose of assessing suitability, providing smoking or vaping cessation support, keeping professional records and managing related administration.”
This consent is separate from marketing consent.
You may withdraw consent at any time by emailing hello@quitwithgreg.co.uk. Withdrawal does not affect processing carried out before withdrawal. If you withdraw consent, we may be unable to continue providing services. We may still retain limited records where needed for legal, insurance, accounting, safeguarding or professional reasons.
6. Sharing your information
We do not sell your personal data.
We may share information only where necessary with:
- booking, payment, email, website hosting, analytics, video call or IT providers;
- accountants, insurers, legal advisers or professional advisers;
- HMRC, regulators, courts or law enforcement where required;
- emergency services, safeguarding authorities or a healthcare professional where there is a serious risk of harm or a legal duty to disclose.
If data is transferred outside the UK, we use appropriate safeguards such as UK adequacy regulations or approved contractual protections.
7. Data retention
We keep your information only for as long as necessary. When retention periods end, data is securely deleted, anonymised or destroyed.
8. Security
We use appropriate technical and organisational measures to protect your data, including access controls, password protection, secure devices, confidentiality procedures, secure storage, careful supplier selection and secure deletion.
If a personal data breach creates a risk to your rights and freedoms, we will notify the Information Commissioner’s Office where required. If the breach is likely to create a high risk to you, we will also inform you without undue delay.
9. Your rights
You have the following rights under UK GDPR:
- to be informed about how your data is used;
- to access a copy of your personal data;
- to correct inaccurate or incomplete data;
- to request deletion in certain circumstances;
- to restrict processing in certain circumstances;
- to object to processing based on legitimate interests or direct marketing;
- to data portability where processing is based on consent or contract and carried out electronically;
- to withdraw consent at any time;
- not to be subject to solely automated decisions producing legal or similarly significant effects. We do not use this type of decision making.
To exercise your rights, email hello@quitwithgreg.co.uk. We may need to verify your identity. We will respond without undue delay and normally within one calendar month. If your request is complex or you make several requests, we may extend this by up to two further months and will explain why.
10. Data protection complaints
If you are concerned about how we use your information, please contact us first at hello@quitwithgreg.co.uk.
We will:
- provide a clear way for you to raise a complaint;
- acknowledge your complaint within 30 days;
- investigate and respond without undue delay;
- keep you informed where appropriate;
- tell you the outcome of your complaint.
You can also complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
11. Cookies and marketing
Non-essential cookies, analytics and marketing emails will only be used where required consent has been given. You can change cookie settings through our website cookie banner and unsubscribe from marketing emails at any time.
12. Updates to this policy
We may update this policy to reflect legal, service or operational changes. The latest version will be published on our website.
Disclaimer: Hypnotherapy is a complementary therapy and results vary from person to person. While many clients achieve excellent results, no outcome can be guaranteed, as success also depends on your own commitment and individual circumstances. Hypnotherapy is not a substitute for medical advice or treatment.