Privacy Policy

  1. How will my data be stored?
    In May 2018 the Data Protection Act was replaced by the General Data Protection Regulations (GDPR). These changes are aimed at ensuring your personal, confidential, and sometimes sensitive data is held privately and securely.

  2. What information do you collect, and why?
    I collect your name, contact details, address, and any information you choose to share during sessions, in order to provide solution focused hypnotherapy, keep accurate session notes, contact you about appointments, and meet my professional and legal obligations as a registered practitioner. Payment details are held only as needed to process fees; I do not store full card details.

  3. How long will you hold my information for?
    In line with NCH guidelines, written records are stored securely for 8 years after the last interaction with an adult client. For a child under 16 at their last session, records are kept until they turn 25. For a 17–18 year old at their last session, records are kept until they turn 26.

  4. What if I would like my data destroyed before this date?
    Due to the sensitive nature of what we do, my insurance company does not allow deletion of data before the minimum required holding period.

  5. Am I able to see or get a copy of the information you hold on me?
    Yes, in line with GDPR, within 30 days of your request.

  6. How do I know you will store my information securely?
    Your data is stored securely using Konfidens, a GDPR-compliant practice management system designed specifically for healthcare professionals. Information is encrypted, password protected, and accessible only by me.

  7. Are our discussions within sessions confidential?
    Yes, unless I need support from my clinical supervisor (in which case themes are discussed anonymously, with no names or identifying details shared), or I believe you are at risk of harming yourself or someone else.

  8. What if I see you outside of a session?
    To protect your privacy, I will always follow your lead. If you choose not to acknowledge me, I will do the same. It is entirely your choice.

  9. Will you discuss information about me with other health or social care professionals?
    Only with your written consent.

  10. What happens if there's a data breach?
    In the unlikely event of a data breach affecting your information, I will report this to the Information Commissioner's Office (ICO) and to you within 72 hours of becoming aware of it.

  11. What if I want to complain about how my data is handled?
    Please raise this with me directly in the first instance. You also have the right to contact the ICO at ico.org.uk or on 0303 123 1113.

  12. Who is the Data Controller, and what is their ICO registration number?
    Victoria is the Data Controller for The Hypnotic Resource. ICO registration number: CSN9871612.