top of page
Untitled design-61.png
IMG_1386_edited.png

Privacy Policy

How will my data be stored?

Hughes Hypnotherapy is committed to protecting your privacy and ensuring that any personal information you provide is handled securely, fairly and transparently.   Personal information is processed in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.   Amanda Hughes-Doran is registered with the Information Commissioner's Office (ICO) and adheres to the professional and ethical standards of the National Council for Hypnotherapy (NCH) and the Association for Solution Focused Hypnotherapy (AfSFH).

Personal information may include your name, contact details, relevant health information, session records, correspondence, and any information you choose to share during the course of your therapy.

Your personal information is collected and processed for the following purposes:

• Providing hypnotherapy services

• Managing appointments and communications

• Maintaining accurate client records

• Meeting legal, professional and insurance obligations

• Monitoring service quality and outcomes where appropriate

Your information will never be sold or shared for marketing purposes.

How long will you hold my information for?

Client records are retained in accordance with professional, legal and insurance requirements.

Adult client records are normally retained for a minimum of eight years following the conclusion of therapy.

Records relating to children and young people are retained in accordance with current professional guidelines and may be held until the client's 25th birthday. Where treatment concludes when a young person is aged 17, records may be retained until their 26th birthday.

At the end of the retention period, records will be securely destroyed or permanently deleted

What if I would like my data to be destroyed before this date?

Under UK GDPR you have the right to request the deletion of your personal information in certain circumstances. However, this right is not absolute. Hughes Hypnotherapy may be required to retain records where there is a legal, professional, safeguarding or insurance obligation to do so.

Requests for deletion should be made in writing. Your identity may need to be verified before any action is taken. Where deletion is possible, records will be securely destroyed or permanently deleted.

Am I able to see or get a copy of the information held by you?

You have the right to request access to the personal information held about you. Requests should be made in writing and your identity may need to be verified before information is released. Subject Access Requests will normally be fulfilled within one calendar month, unless an extension is permitted by law. There is generally no charge for this service unless a request is manifestly unfounded, excessive or repetitive.

What are your Reasons for collecting this information?

To provide safe and effective hypnotherapy services, Hughes Hypnotherapy may collect:

• Contact details

• Emergency contact details where appropriate

• GP details (with your consent)

• Relevant medical and wellbeing information

• Information about your goals for therapy

• Brief session notes

• Outcome measurement information where applicable

• Information relevant to safeguarding obligations

Only information necessary for providing therapy and meeting professional obligations will be collected.

Are our discussions within the hypnotherapy sessions confidential?

Everything you discuss with Amanda during your sessions remains strictly confidential. Occasionally it may be necessary for Amanda to discuss elements of your sessions with her supervisor to ensure that she is helping you in the most effective way. However, no identifying features about you will be disclosed during these discussions. Amanda’s supervisor is also registered with GDPR.

How do I know that Amanda will store my information securely?

  • Paper session notes – If Amanda keeps any paper session the notes will be kept in a locked filing cabinet.

  • Session notes – Any typed up session notes are kept on Amanda’s laptop which requires a username and passcode.

  • Text messages – Amanda’s work phone is secured with Fingerprint ID recognition or a passcode.

  • Emails – Amanda’s email account requires a username and password.

  • Hughes Hypnotherapy uses appropriate technical and organisational measures to protect personal information.

  • These may include:

  • • Password-protected computer, phonesand devices

  • • Secure email account

  • • Encrypted or secure cloud-based systems where appropriate

  • • Locked storage for any paper records

  • • Restricted access to client information

  • • Secure destruction of records when no longer required

  • Reasonable steps are taken to ensure that personal information remains confidential, accurate and secure.

What if I see Amanda outside of a hypnotherapy session?

Your privacy and confidentiality remain important at all times. If we happen to meet outside of a therapy session, Amanda may acknowledge you, but will not identify you as a client or discuss any aspect of your therapy unless you choose to do so.

Will Amanda discuss information about me with other health and social care professionals?

Information will only be shared with healthcare professionals, such as your GP, with your explicit consent unless there is a legal, safeguarding or professional obligation to disclose information. Where communication with another healthcare professional is appropriate, your consent will normally be obtained beforehand.

bottom of page