Privacy & Policy
Rabia Baqi — Rapid Transformational Therapy® & Hypnotherapy
Last updated: 1 July 2026 · Effective date: 1 July 2026
Your privacy and the confidentiality of what you share with us matter deeply. This Privacy Policy explains what personal information we collect, how and why we use it, who we share it with, how long we keep it, how we protect it, and the rights you have — including if you are in the United Kingdom, the European Union, the United Arab Emirates, the United States, or elsewhere.
1. Who we are (Data Controller)
Rabia Baqi (“we”, “us”, “our”), trading as Rabia Baqi LLC FZ, a free zone company based in Dubai, United Arab Emirates, is the “controller” responsible for your personal information.
For any privacy question or to exercise your rights, contact us at info@rabiabaqi.com.
2. The information we collect
Depending on how you interact with us, we may collect:
Name, email address, phone/WhatsApp number, country/time zone, and (for in-person sessions) any details needed to meet.
The service you’re interested in, messages you send us via the website contact form or WhatsApp, appointment times and history.
Health & wellbeing information (special category)
Notes we make for professional and quality purposes, and any personalised recordings created for you.
Records that a payment was made and for what. Card or bank details, where used, are handled directly by the payment provider and are not stored by us.
Basic data such as IP address, device/browser type and cookie data when you use our website (see Cookies).
You do not have to share health information with us, but we may be unable to provide services safely, or at all, without the information we reasonably need.
3. How we collect it
Directly from you — via the website contact form, WhatsApp, email, discovery calls and sessions.
Automatically — via cookies and similar technologies when you use our website.
From tools we use to deliver services — for example the video-call platform you interact with.
4. Why we use your information, and our legal bases
For clients in the UK/EU, we rely on the following legal bases under the UK GDPR and EU GDPR (and we apply equivalent principles for clients elsewhere):
Responding to enquiries and discovery calls
Our legitimate interests (to respond to you) and/or steps to enter a contract at your request.
Providing and managing your sessions, packages and recordings
Performance of our contract with you.
Using health/wellbeing information to deliver therapy and assess suitability
Your explicit consent, and/or the provision of health/therapeutic services (special-category conditions under Article 9 GDPR). You may withdraw consent at any time (see Your rights).
Taking payment and keeping financial records
Performance of contract and compliance with legal/accounting obligations.
Safety, safeguarding and legal compliance
Legal obligation and/or protecting vital interests where there is a risk of serious harm.
Improving and securing our website
Our legitimate interests and, where required, your consent (e.g. non-essential cookies).
5. Who we share it with
We do not sell your personal information. We share it only where necessary, with:
Note: WhatsApp and Zoom are third parties with their own privacy practices. Please avoid sharing detailed sensitive health information over WhatsApp; use it mainly for scheduling and brief messages.
6. International transfers
Because we are based in the UAE and serve clients worldwide, your information may be processed in, or transferred to, countries outside your own — including the UAE, and countries where our service providers operate. Data-protection laws in those countries may differ from your own.
Where we transfer personal data of UK/EU individuals internationally, we take steps to ensure an appropriate level of protection, such as relying on adequacy decisions where available, or using approved contractual safeguards (for example, the UK International Data Transfer Agreement / Addendum or EU Standard Contractual Clauses) with our providers.
7. How long we keep it
We keep your information only for as long as necessary for the purposes above, including to meet professional, legal, accounting or reporting requirements. As a general guide:
We keep your information only for as long as necessary for the purposes above, including to meet professional, legal, accounting or reporting requirements. As a general guide:
8. How we protect it
We use appropriate technical and organisational measures to protect your information, such as restricted access, secure storage, encrypted or password-protected files where appropriate, and confidentiality obligations. No method of transmission or storage is completely secure, but we take reasonable steps to safeguard your data and to respond appropriately to any personal-data breach, including notifying you and the relevant authority where required by law.
9. Your rights
Subject to your location and applicable law, you may have the right to:
To exercise any right, email
info@rabiabaqi.com. We will respond within the timeframe required by applicable law (generally one month under GDPR) and may need to verify your identity first.
If you are in the UK or EU (UK GDPR / EU GDPR)
You have the rights listed above. If you are unhappy with how we handle your data, you can complain to your local supervisory authority — in the UK, the Information Commissioner’s Office (ICO) at ico.org.uk; in the EU, your national data-protection authority.
If you are in the United Arab Emirates (PDPL)
Where applicable, we handle personal data consistently with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and any applicable free-zone data-protection rules. You may contact us to exercise your rights and, where relevant, raise concerns with the UAE Data Office.
If you are in the United States (e.g. California)
If you are a California resident, the CCPA/CPRA may give you rights to know what personal information we collect, to access and delete it, to correct it, and to opt out of “sale” or “sharing” of personal information. We do not sell your personal information. You will not be discriminated against for exercising these rights. Residents of other US states with privacy laws may have similar rights. To exercise them, contact
info@rabiabaqi.com.
10. Cookies
Our website uses cookies and similar technologies to help it function and to understand how it is used. Essential cookies are necessary for the site to work; non-essential cookies (for example analytics) are used only where permitted or with your consent where required. You can control cookies through your browser settings.
11. Children
Our services and website are intended for adults aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always the one published on this page, with the “last updated” date shown above. Material changes will be highlighted where appropriate.
13. Contact
For any question about this policy or your personal information, contact us at
info@rabiabaqi.com.
