GDPR Privacy Policy

Updated: June 2026

At Heath Green Hypnotherapy, I am committed to protecting and respecting your privacy. This Privacy Notice explains how I collect, use, look after, and protect your personal data when you use my hypnotherapy services or visit my website.

1. Who I Am

Heather Wyatt is the data controller responsible for your personal data.

2. Data I Collect

Because Solution-Focused Hypnotherapy focuses on your future goals rather than dwelling on past problems, the data collected is kept to what is strictly necessary. However, I still process the following information:

  • Identity & Contact Data: Name, age, address, email, and phone number.
  • Emergency Contact: Name and contact details of a trusted person or your GP (used only in emergencies).
  • Special Category Data: Brief notes regarding your physical and mental health, lifestyle, and any medications relevant to our therapy sessions.
  • Any information you choose to supply regarding the purpose of your enquiry
  • Session notes
  • Appointment history
  • Emails and text messages
  • Technical Data: IP address, browser type, and cookies if you visit my website.

3. How Data is Collected

I collect data through various methods, including:

  • Direct Interaction: Information you provide when filling out an initial consultation form, during our sessions, or when contacting me via email/phone.
  • Automated Technologies: Cookies and analytical tools on my website.

4. How and Why Your Data is Used

I will only use your personal data when the law allows me to. Most commonly, it is used for:

  • Contractual Necessity: To provide you with the hypnotherapy services you have requested.
  • Legitimate Interests: To safely manage my business, schedule appointments, and send reminders.
  • Legal and Professional Obligations
  • Consent: For any marketing materials you explicitly opt-in to receive.

Note on Special Category Data: Health-related data is processed under the condition of explicit consent (provided during your initial consultation) and because it is necessary for the provision of healthcare or treatment.

5. Data Security and Storage

Your privacy is treated with the utmost confidentiality.

  • Paper Records: Any physical consultation forms or session tracking notes are kept in a securely locked box.
  • Digital Records: These are password protected and stored securely.
  • Retention: I will only keep your data for as long as necessary. Typically, professional insurance and professional bodies (like the AfSFH or NCH) require therapy records to be kept for 7 years after the conclusion of treatment (or until a child turns 25, if they were under 16). After this period, data is securely deleted or destroyed.

6. Sharing Your Data

  • Your information is kept confidential and is never sold to third parties. It will only be shared under the following exceptional circumstances:
  • Legal Duty: If I am legally required to disclose information (e.g., by a court order).
  • Safeguarding: If I believe there is a severe risk of harm to yourself or others.
  • Supervision: As part of professional requirements, I participate in clinical supervision. Cases are discussed anonymously, and your identity is never revealed.
  • With your explicit written consent (e.g. communicating with your GP where appropriate)

7. Your Legal Rights

Under data protection laws, you have rights regarding your personal information, including the right to:

  • Access a copy of the personal data held about you.
  • Rectify any incorrect or incomplete information.
  • Erase your personal data (subject to legal or insurance requirements to retain it).
  • Withdraw Consent at any time where consent was required to process your data.
  • Restrict or object to processing in certain circumstances

Requests can be made in writing or by email

8. How to Complain

If you have any concerns about how your data is handled, please contact me directly so I can resolve the issue with you. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Contact Details

If you have any questions regarding this privacy notice or the information held about you, please contact:

Online Privacy Policy

Contact Form

When you contact us via our website Contact form, we will collect your name and email address. By using the Contact Form you consent to us using this information for correspondence purposes, notably to discuss your interest in Hypnotherapy treatment and to book an appointment. To have your email deleted from our records, please contact us by email.

Testimonials

Subject to your prior consent, we may publish information you provide about treatment you received from us as a Testimonial on our website. Such information may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such information by others. To have your testimonial deleted from our website please contact us by email.

Cookies

Like any other website, our website uses ‘cookies’. These cookies are used to store information including visitors’ preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users’ experience by customizing our web page content based on visitors’ browser type and/or other information.

You can choose to disable cookies through your individual browser options. More information on how to do this can be found by visiting the following links :

  • https://support.google.com/chrome/answer/95647?hl=en (Chrome);
  • https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox);
  • http://www.opera.com/help/tutorials/security/cookies/ (Opera);
  • https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);
  • https://support.apple.com/kb/PH21411 (Safari); and
  • https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).

Note that if you block cookies, some features of our website may not be available to you.

See our Cookie Policy.

Links to other sites

Our website may contain links to other sites (Facebook, Twitter, PayPal etc). Our Privacy Policy does not apply to other websites. Thus, we are advising you to consult the respective Privacy Policies of these other sites for more detailed information. It may include their practices and instructions about how to opt-out of certain options.

Log Files

Our website follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services’ analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.

Children’s Information

We do not knowingly collect any Personal Identifiable Information from children under the age of 18. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.

Consent

By using our website, you hereby consent to our Online Privacy Policy. We may update this Policy from time to time, and we invite you to check this page periodically to ensure you are happy with any changes to it.