Privacy Policy

Last Updated: July 2026

Introduction
This Privacy Notice explains how Help Hypnotherapy collects, uses, stores, protects and, where necessary, shares your personal information when providinghypnotherapy, coaching, supervision, training and related wellbeing services, whether delivered in person or online.

Help Hypnotherapy is committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and professional ethical standards. This policy applies to clients located within the United Kingdom and internationally.

Data Controller
Help Hypnotherapy
4 North Sudley Road

Liverpool

L17 0BG

[email protected]
07775503659
The Data Controller responsible for your personal information is Robert Sanderson

What Information Is Collected

The following information may be collected:

Name
• Address

• Date of birth

• Telephone number

• Email address

• Emergency contact details

• GP details (where relevant)

• Medical history

• Medication information

• Lifestyle information relevant to therapy

• Session notes

• Payment information

• Correspondence via email, text message, WhatsApp, video conferencing platforms or contact forms

Sensitive personal data relating to health and wellbeing is only collected where necessary to provide safe and appropriate therapy.

How Your Information Is Collected

Information may be collected when you:

• Complete a consultation form

• Contact the practice by telephone, email, website or social media

• Attend therapy sessions in person or online

• Subscribe to newsletters or marketing communications

• Make payments for services

Participate in supervision, workshops or training events

Why Your Information Is Collected

Your information is used to:

• Provide hypnotherapy services safely and effectively

• Assess suitability for therapy

• Maintain professional records

• Arrange appointments

• Communicate regarding sessions

• Process payments

• Comply with legal, insurance and professional obligations

• Provide supervision and training services where applicable

Your information will never be sold to third parties.

Lawful Basis for Processing

Under UK GDPR, the lawful bases relied upon include:

• Consent

• Contractual obligation

• Legitimate interests

• Provision of health-related services

Sensitive health information is processed under Article 9(2)(h) UK GDPR for the provision of health and wellbeing services.

Online Therapy and International Clients

Therapy sessions may be conducted in person or online using video conferencing platforms such as Zoom, Microsoft Teams or Google Meet.

Clients are responsible for ensuring they have a private and suitable environment for online sessions.

This practice works with clients located throughout the world. Personal information will normally be processed and stored within the United Kingdom. Where information is transferred internationally, reasonable safeguards will be implemented to protect personal data.

Clients are responsible for ensuring that receiving hypnotherapy services is lawful within their own country, state or jurisdiction.

Confidentiality

All sessions are confidential unless:

• There is a risk of serious harm to yourself or others

• Disclosure is required by law

• There are safeguarding concerns involving children or vulnerable adults

Where possible, confidentiality breaches will be discussed with you first.

Supervision

“The practitioner may discuss aspects of client work with a qualified clinical supervisor as required by their professional body, with identifying details removed wherever possible.” As part of professional practice, anonymised information may occasionally be discussed with a clinical supervisor. Identifiable personal information will not normally be disclosed unless there is a legitimate professional or legal reason to do so.

How Your Information Is Stored

Your information is stored securely using password-protected digital systems and/or locked paper files.

Reasonable measures are taken to prevent unauthorised access, loss or misuse of personal information.

How Long Records Are Kept

Client records are normally retained for:

• Adults: Seven years after the end of therapy

• Children: Until age 25 or seven years after therapy ends, whichever is longer

Financial records may be retained for up to six years in accordance with HMRC requirements.

Records are securely destroyed after the retention period.

Sharing Your Information

Information will only be shared where necessary and appropriate, for example:

• With your consent

• For supervision purposes (anonymised where possible)

• If legally required

• To protect safety and wellbeing

Third-party service providers such as online booking systems, payment providers, email providers or video conferencing platforms may process information on our behalf and are expected to comply with applicable data protection legislation.

Electronic Communications

Email, text messages, WhatsApp and other electronic communication methods may be used for appointment reminders and administrative purposes.

Whilst reasonable precautions are taken, electronic communications cannot be guaranteed to be completely secure and should not be used for emergencies or urgent mental health support.

Electronic communications are used for administrative purposes only, such as appointment confirmations, reminders and responding to enquiries. Whilst reasonable security measures are in place, clients should avoid sending sensitive medical or highly confidential information via unsecured email or messaging services wherever possible.

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Request correction of inaccurate information

• Request deletion of information where appropriate

• Restrict or object to processing

• Withdraw consent at any time

• Lodge a complaint with the Information Commissioner’s Office

The UK data protection regulator is the Information Commissioner’s Office.

Data Protection Complaints

If you have any concerns about how your personal information has been collected, stored or used, please contact Help Hypnotherapy in the first instance. We take all privacy concerns seriously and will investigate your complaint promptly, fairly and in accordance with current UK data protection legislation.

If you remain dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Telephone: 0303 123 1113

Website: www.ico.org.uk

Website and Cookies

If this website uses cookies, analytics or contact forms, information may be collected automatically to improve website performance and user experience.

You can disable cookies through your browser settings.

Contact

If you have any questions about this Privacy Policy or how your information is handled, please contact:

Robert Sanderson Help Hypnotherapy

[email protected]

07775503659

www.helphypnotherapy.co.uk

Changes to This Policy

This Privacy Policy may be updated from time to time. The latest version will always be available on the website.

Version 1.1

Last Updated: July 2026