Respecting your privacy at every step

At Aloe Hypnotherapy, we take your privacy extremely seriously. Your personal information is handled with care, respect and in full compliance with UK GDPR.

How your data Is stored

Your personal and sensitive information is stored securely and confidentially. As your document states: “The General Data Protection Regulations (GDPR) ensure the secure and private storage of personal, confidential, and sometimes sensitive data.”

All digital information is kept on a secure, password‑protected laptop. Any written notes are stored safely and destroyed securely when no longer required.

Lawful basis for processing

Aloe Hypnotherapy processes your information under the following lawful bases:

• Consent – You agree to me holding and using your information for hypnotherapy

• Legitimate Interests – Processing is necessary to deliver safe, effective therapy

• Vital Interests – In rare safeguarding situations where there is risk of harm

How long your information Is kept

In line with NCH guidance:

• Adult client records are kept for eight years after your final session

• Clients under 16: records are kept until age 25

• Clients aged 17–18: records are kept until age 26

Your GDPR rights

Under UK GDPR, you have the right to:

• Access the information I hold about you

• Request corrections

• Request deletion

• Restrict processing

• Object to certain types of processing

• Request your data in a transferable format

You can exercise any of these rights by contacting me directly.

Why your information is collected

Your information is collected to ensure your hypnotherapy sessions are safe, effective, and tailored to your needs.

Confidentiality

Your sessions are confidential. Information is only shared when:

• There is a legal obligation

• There is a risk of serious harm

• Safeguarding concerns arise

• You provide written consent for information to be shared with other professionals

Your document notes: “Information is only shared with other health or social care professionals with your written consent, or if there is clear risk of harm.”

If we meet outside a session

To protect your confidentiality, I will not initiate contact or acknowledge that I know you. If you choose to greet me, I will respond warmly and professionally.

Data controller

Aloe Hypnotherapy ICO Registration Number: ZB926313

Complaints procedure

If you believe your data has been handled incorrectly, please contact me at enquiries@aloehypnotherapy.com.

I will acknowledge your concern within 7 days and aim to respond fully within 30 days.

If you are not satisfied, you may contact the Information Commissioner’s Office (ICO):

• Website: www.ico.org.uk

• Helpline: 0303 123 1113

You may contact the ICO at any stage, but I encourage you to speak with me first so I can resolve the matter promptly.

Privacy notice