Privacy Notice

In May 2018 the Data Protection Act was replaced by the General Data Protection Regulations (GDPR). The changes are aimed at ensuring that your personal, confidential and sometimes sensitive data is held privately and securely. All records are stored in line with these requirements — see section 6 below for the specific measures we take.

In line with professional guidelines set by the National Hypnotherapy Society and relevant regulatory standards, client records are retained for an appropriate period to ensure continuity of care and to meet legal requirements.

• For adult clients, records are kept securely for 8 years after the final session.
• For clients under 18, records are retained until the client reaches 25 years of age (or 26 if they were 17–18 at the time of their final session).

After these time periods, all records are securely and confidentially destroyed.

Due to the sensitive nature of what we do, we are required to retain client records for the minimum time periods outlined above in line with our professional guidelines and legal obligations.

In line with UK GDPR, yes — within 30 days of a written request. Please email catlinhypnotherapy@gmail.com.

We collect and process your personal information in order to provide a safe, ethical and effective hypnotherapy service, in line with our training and professional responsibilities as hypnotherapists. Your information is used to:

• Assess your suitability for hypnotherapy and ensure it is appropriate for your needs
• Plan and deliver sessions tailored to your individual goals
• Maintain accurate and confidential client records as required by our training body and professional membership organisations
• Monitor your progress and ensure continuity of care
• Contact you regarding appointments or information relevant to your sessions
• Meet legal, safeguarding and professional requirements, including those set by professional bodies

Some of the information collected may be classed as special category (health) data. This is only collected where necessary and is processed with your explicit consent for therapeutic purposes. Your information will only be used for the purposes outlined above and will not be used for marketing or shared with third parties without your consent, unless required by law.

We take the security of your personal information very seriously and have appropriate measures in place to protect it in line with UK GDPR requirements:

• Paper records are stored in a locked cabinet in a secure location, with access restricted to us only
• Digital records are stored on password-protected devices and/or secure systems
• We use strong passwords and keep all devices updated with appropriate security measures
• Where possible, electronic data is encrypted and backed up securely
• We do not store client information on shared or public devices
• Only we have access to your personal data, unless disclosure is required by law or safeguarding responsibilities

These measures are designed to prevent unauthorised access, loss, misuse or disclosure of your information.

Yes — unless we need support from our supervisor, or we believe that you are about to harm yourself or another person.

Your confidentiality and privacy are very important to us. If we see you outside of a session — for example in a public place — we will not acknowledge you unless you choose to acknowledge us first. This is to protect your privacy and ensure no assumptions are made about our therapeutic relationship. If you do greet us we will respond politely but will not discuss any aspect of our work together in a public setting. If you have any preferences about how you would like this handled, please let us know.

Only with your written consent.

• Data Controller: Felicity Haines
• ICO Registration Number: ZC142355
• Contact: catlinhypnotherapy@gmail.com

As the Data Controller, Felicity is responsible for ensuring that your personal data is processed in accordance with UK GDPR and the Data Protection Act 2018.

If you are concerned about how we have handled your personal information, please contact us first at catlinhypnotherapy@gmail.com so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.