Privacy Policy

Draft: please review this policy so it accurately reflects how you collect and use data, and consider professional advice.

Who I am

Key To Change Hypnosis is run by [Your full name or business name] (“I”, “me”), [address]. I am the data controller for personal information collected through this website and my practice. [ICO registration number, if registered]. Contact: [email address].

What information I collect

• Enquiries: your name, email, phone number and message when you contact me.
• Client records: contact details, session notes and health information you choose to share, which is “special category” data.
• Payments: records of payments made (I do not store card details).
• Website data: technical information such as your IP address and browser, through cookies. See the cookie policy.

How and why I use it

• To reply to enquiries and arrange sessions (legitimate interests / steps before a contract).
• To provide hypnotherapy and keep appropriate records (contract; and for health data, your explicit consent and the provision of health care).
• To meet legal, insurance and professional obligations (legal obligation).
• To send occasional news, only if you have opted in (consent). You can unsubscribe at any time.

Sharing

I never sell your data. I share it only with trusted services that help me run my practice, such as [website host, email provider, booking or video-call platform, accountant], under appropriate data protection terms, or when required by law or professional obligations (for example a serious risk of harm).

How long I keep it

Enquiries that do not lead to sessions are deleted within [12 months]. Client records are kept for [7 years] after our last session, in line with professional and insurance guidance, then securely destroyed.

Your rights

Under UK GDPR you can ask to access, correct or delete your data, restrict or object to its use, and request a copy to transfer. Where I rely on consent you can withdraw it at any time. Contact me to make a request. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

Security

I keep records securely using [e.g. encrypted, password-protected systems and locked storage for paper notes].

Changes

I may update this policy from time to time. The latest version will always be on this page.