Privacy Policy
Statement of Intent
At Thistle Green Hypnotherapy, I am committed to protecting your privacy and handling your personal information with care, respect and transparency.
This Privacy Policy explains what information I collect, why I collect it, how it is used, how it is stored and your rights regarding your personal information.
By using this website or engaging in hypnotherapy services, you acknowledge the practices described in this Privacy Policy.
Who I Am
Thistle Green Hypnotherapy is operated by Zoe McAlpine.
Website: www.thistlegreenhypnotherapy.co.uk
Email: info@thistlegreenhypnotherapy.co.uk
For the purposes of data protection legislation, Thistle Green Hypnotherapy is the Data Controller responsible for the personal information collected through this website and my professional services.
Information Collected When You Contact Me
If You Contact Me
When you contact me via email, telephone, social media or the website, I may collect:
- Your name
- Email address
- Telephone number
- Details relating to your enquiry
- Any other information you choose to provide
This information allows me to respond to your enquiry and determine whether my services are appropriate for your needs.
If You Become A Client
If you decide to work with me, I may collect information including:
- Name
- Address
- Date of birth
- Email address
- Telephone number
- Emergency contact details
- GP details
- Relevant health and wellbeing information
- Information discussed during sessions
- Therapy goals
- Session notes and records
Only information that is relevant to the safe and effective delivery of hypnotherapy services will be collected.
How Your Information Is Used
Your information may be used to:
- Respond to enquiries
- Arrange and manage appointments
- Deliver hypnotherapy services
- Develop personalised therapy plans and recordings
- Maintain professional client records
- Send appointment confirmations and reminders
- Process payments
- Meet legal, professional and insurance obliigations
- Protect the safety and wellbeing of clients and others where required
I will never sell your personal information to third parties.
Lawful Basis For Processing
Under UK GDPR, I rely on one or more of the following lawful bases:
Contract – Processing is necessary to provide the services you have requested
Legitimate Interests – Processing is necessary for the administration of my practice and the delivery of professional services
Legal Obligation – Processing may be necessary to comply with legal, safeguarding, regulatory or insurance requirements
Explicit Consent – Where special category information, such as health information, is collected, this is processed with your explicit consent and where necessary for the provision of therapeutic services.
Confidentiality
Everything discussed during therapy sessions is treated confidentially.
However, there are limited circumstances where confidentiality may need to be broken, including:
- Where there is a serious risk of harm to yourself or another person.
- Where there are safeguarding concerns involving a child or vulnerable adult.
- Where disclosure is required by law.
- Where disclosure is required by a court order.
- Where there is a legal obligation to report criminal activity.
Where appropriate and practical, I will discuss any disclosure with you beforehand
Third Party Service Providers
To support the operation of my business, I use trusted third-party service providers for activities such as appointment booking, online appointments, payment processing, email communication, website hosting, analytics and secure business administration.
These providers only process personal information where necessary to provide their services and are required to maintain appropriate standards of privacy, confidentiality and security.
International Transfers
Some service providers may process information outside the United Kingdom.
Where this occurs, appropriate safeguards are in place to ensure your personal information continues to receive the appropriate level of protection in accordance with UK data protection law.
How Your Information Is Stored
I take the security of your personal information seriously.
Appropriate technical and organisational measures are in place to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.
Access to client information is restricted and information is stored using secure systems and password-protected devices.
Retention of Records
Client records are retained in accordance with professional and insurance requirements.
Adult Records – Records are normally retained for 7 years following the end of therapy.
Children and Young People – Records are normally retained until the client’s 25th birthday or for 7 years following the end of therapy, whichever is longer.
At the end of the retention period, records will be securely destroyed.
Marketing Communications
I will only send marketing emails, newsletters or promotional information where you have given your consent.
You can withdraw your consent at any time by contacting me or by using the unsubscribe link included in communications.
Cookies
This website may use cookies to improve functionality, enhance user experience and monitor website performance.
Where required, you will be given the option to accept or reject non-essential cookies when visiting the website.
You can also manage cookie settings through your browser.
Links To Other Websites
My website may contain links to external websites.
Once you leave my website, I cannot be responsible for the protection and privacy of any information you provide on those websites. I encourage you to review their privacy policies before providing personal information.
Your Rights
Under UK data protection law, you have the right to:
- Be informed about how your personal information is used
- Access the personal information held about you
- Request correction of inaccurate information
- Request deletion of information where applicable
- Restrict processing
- Object to processing
- Request transfer of your information where applicable
- Withdraw consent where consent is relied upon
If you wish to exercise any of these rights, please contact:
info@thistlegreenhypnotherapy.co.uk
I will normally respond within one month.
Data Protection Complaints
If you have concerns about how your personal information has been collected, stored or used, please contact me in the first instance so that I can investigate and attempt to resolve the matter.
Complaints will be acknowledged within 30 days and investigated without undue delay.
If you remain dissatisfied following my response, you have the right to complain to the Information Commissioner’s Office (ICO).
Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
ICO Registration Number: ZB507795
Changes To This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in legislation, professional guidance or business practices.
The most current version will always be available on this website.
Thank you for trusting Thistle Green Hypnotherapy with your personal information.