1. Who We Are

This Privacy Policy explains how your personal information is collected, used, and protected by:

Dee Taylor-Mason
Email: deetaylor-mason@gmail.com
Phone: 07773 439781

As a UK-based hypnotherapy practice, we are committed to respecting and protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


2. What Information We Collect

We collect and process the following types of personal data:

  • Identity Information – Name, gender
  • Contact Details – Address, phone number, email
  • Health Information – Relevant medical history, GP contact (if needed), presenting issues, therapy session notes
  • Session Records – Notes taken during or after sessions
  • Payment Details – Limited financial information (e.g. payment confirmations, not full card numbers)
  • Website Data – IP address, browser type, cookies (see section 7)

3. How We Use Your Information

We use your data to:

  • Provide hypnotherapy services
  • Arrange appointments and communicate with you
  • Maintain accurate clinical records
  • Comply with legal or regulatory obligations
  • Respond to enquiries made through our website

We will only use your personal information when the law allows us to. Most commonly, this will be:

  • To fulfil a contract with you (i.e. provide therapy)
  • When it is necessary for our legitimate interests
  • Where we are legally obliged
  • With your explicit consent (e.g. to share notes with a medical professional)

4. How Your Information Is Stored

Your data is stored securely:

  • Electronically: On password-protected and encrypted devices or cloud services

We retain your information for up to 7 years after your last session (or until age 25 for minors), as recommended by professional bodies and insurers.


5. Sharing Your Data

We will never sell or rent your personal data. We only share your information when:

  • Required by law (e.g. safeguarding concerns or court orders)
  • With your explicit consent (e.g. referral to another professional)
  • With service providers (e.g. secure online booking or payment systems) under strict data protection agreements

6. Your Rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your data (“right to be forgotten”) in certain circumstances
  • Object to processing or request restrictions
  • Data portability (for data you provided directly)

To exercise any of these rights, please contact us at deetaylor-mason@gmail.com.


7. Website Cookies and Analytics

Our website may use cookies to improve user experience. Cookies are small files placed on your device that collect standard internet log and visitor behaviour information.

You can set your browser not to accept cookies, and you can remove cookies via your browser settings. Some site features may not function properly without them.

If we use analytics tools (e.g. Google Analytics), they may collect anonymised data such as:

  • Pages visited
  • Time on site
  • Device and browser type

8. Data Security

We take appropriate technical and organisational measures to keep your data safe, including encryption, secure storage, and access controls.

However, while we strive to protect your personal data, we cannot guarantee absolute security when data is transmitted over the internet.


9. Changes to This Privacy Policy

This policy is reviewed regularly and may be updated to remain compliant with UK legislation. The most current version will always be available on our website.


10. Contact and Complaints

If you have any questions about this policy or how your data is handled, please contact:

Dee Taylor-Mason
Email: deetaylor-mason@gmail.com
Phone: 07773 439781

If you’re not satisfied with our response, you can contact the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Phone: 0303 123 1113