Privacy Policy

GDPR Policy 

This GDPR Policy is dedicated to ensuring the privacy and security of personal data handled by Emily Bentham Hypnotherapy. We are committed to complying with the General Data Protection Regulation (GDPR) and ensuring that our client's data is protected, responsibly managed, and maintained with the utmost confidentiality.

1. Lawful Basis for Processing Data: The therapy practice processes client data based on the following lawful bases:

Consent: Clients have explicitly consented to the processing of their personal data for specified purposes related to their hypnotherapy treatments.

Contract: Processing is necessary to fulfil contractual obligations with our clients, providing the agreed-upon hypnotherapy services.

Legitimate Interests: Processing is necessary for the legitimate interests pursued by The Therapy Practice, except where such interests are overridden by the interests or fundamental rights and freedoms of our clients.

2. Consent Management: We ensure that consent is freely given, specific, informed, and unambiguous. Clients can easily withdraw their consent at any time, and this process is as straightforward as it is to give consent.

3. Data Minimisation and Purpose Limitation: We collect data that is strictly necessary for the provision of hypnotherapy services and adhere strictly to the purposes for which the data was collected. Personal data is not used for any new, unrelated purposes without further consent from the client.

4. Data Subject Rights: Clients at Emily Bentham Hypnotherapy have the following rights:

The right to access their personal data.

The right to rectification of inaccuracies.

The right to the erasure of their data ("right to be forgotten").

The right to data portability.

The right to restrict the processing of their data.

5. Data Security: Appropriate technical and organisational measures are in place to protect client data from unauthorized access, alteration, disclosure, or destruction. These measures are regularly reviewed and updated to ensure the highest level of security.

6. Data Processing Agreements: We ensure that all third-party service providers with access to client data (e.g., cloud storage, appointment scheduling software) are compliant with GDPR and have entered into compliant processing agreements.

7. Privacy Notices: Our privacy notices clearly outline the type of data collected, the purpose of the collection, and how the data is used. We ensure transparency and openness with our clients regarding their data.

8. Data Protection Impact Assessment (DPIA): When introducing new data processing technologies or methodologies that might impact the privacy of client data, a DPIA is conducted to assess and mitigate risks.

9. Data Breach Notification: In the unlikely event of a data breach, we have procedures in place to detect, report, and investigate the breach. Relevant authorities are notified within 72 hours of becoming aware of the breach, in compliance with GDPR regulations.

10. Training and Awareness: All staff at Emily Bentham Hypnotherapy, are regularly trained and made aware of GDPR obligations, ensuring that client data is handled responsibly and in compliance with this policy.

This GDPR Policy is regularly reviewed and updated to ensure ongoing compliance with the latest regulations and best practices in data protection. For any inquiries or concerns regarding your data, please contact your therapist.

Client Privacy Policy

At Emily Bentham Hypnotherapy, we understand the importance of your privacy. We are committed to protecting your personal information and ensuring that your privacy is respected and maintained at all times. This policy outlines the types of data we collect, the purpose of the data collection, how the data is used, and the retention period for your data.

1. Type of Data Collected: We may collect the following types of personal data:

Contact Information: Includes name, address, email, and phone number.

Health Information: Details about your medical history, symptoms, treatment plans, and progress notes relevant to the hypnotherapy services provided.

Payment Information: Details necessary to process payments for our services.

2. Purpose of Data Collection: The data collected is used for the following purposes:

Contact Information: To maintain communication with you regarding appointments, treatments, and updates from Emily Bentham Hypnotherapy.

Health Information: To provide tailored, effective hypnotherapy services and ensure that your treatment is safe and appropriate for your needs.

Payment Information: To process payments for the services provided.

3. Use of Data: The data collected is strictly used for the purposes mentioned above. We do not share your personal data with third parties unless it is necessary for providing the services requested (e.g., processing payments), or we are legally required to do so.

4. Retention of Data: We retain client data for the following durations:

Adults: Client data is retained for a minimum of 7 years following the last treatment or until the client reaches the age of 25, whichever is longer.

Children: For clients under 18, data is retained until the client reaches the age of 25 or for 7 years after the last treatment, whichever is longer.

These retention periods are based on insurance company and professional association guidelines, ensuring that we comply with legal, ethical, and professional obligations.

5. Your Rights: As a client, you have the right to:

Access the personal data we hold about you.

Request the correction of inaccurate or incomplete data.

Request the deletion of your data or restrict its processing.

Withdraw consent for the processing of your data, where consent is the legal basis for processing.

6. Data Security: We take the security of your data seriously. We have implemented appropriate technical and organisational measures to protect your data from unauthorised access, alteration, or disclosure.

7. Changes to Privacy Policy: We may update this privacy policy from time to time. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

8. Contact Us: If you have any questions or concerns about our privacy policy or the handling of your personal data, please contact us at: Emily Bentham Hypnotherapy, 9 Leveret Drive, Wymeswold, Loughborough LE12 6BQ

This privacy policy is in effect as of 1st May 2025. By continuing to use our services, you acknowledge and accept the terms of this policy.