GDPR and Privacy Policy for Yve Pattenden Hypnotherapy

Last updated: January 2025 

1. Introduction
Yve Pattenden Hypnotherapy is committed to protecting and respecting your privacy. This policy explains how your personal data is collected, used, stored, and safeguarded, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Collection
Therapy and Consultation Data

Personal information: Name, address, contact details, date of birth, and relevant health information necessary for hypnotherapy sessions.

Session notes: Brief session notes may be recorded to monitor progress and fulfil professional obligations.
Website Data

Cookies: Our website uses cookies to improve user experience. Cookies track website usage patterns, remember preferences, and help us analyse website performance. You can disable cookies in your browser settings if you prefer.

Contact forms: If you submit a form on the website, we may collect your name, email address, and any other information you provide to respond to your enquiry.
 
3. Purpose and Legal Basis for Processing
Provision of Services: We collect and process personal data to deliver hypnotherapy services safely and effectively.

Professional Standards and Insurance: We retain certain data to comply with insurance requirements and the standards of professional associations (e.g., for record-keeping and quality assurance).

Website Functionality: Cookies and analytics data help us maintain, improve, and personalise the website experience.
 
4. Data Storage and Security
Storage:
Your personal data is stored securely in electronic and/or paper format, accessible only by authorised personnel.

Retention: Data is retained only for as long as is necessary to fulfil the purposes outlined in this policy and meet legal or professional obligations. Typically, session notes and related documents may be kept for a specified period as required by insurers or professional bodies.

Security Measures: We employ technical and organisational measures (such as password-protected files, secure storage, and locked filing cabinets) to protect your information from unauthorised access, alteration, or disclosure.
 
5. Data Sharing
Third Parties: We do not sell or rent your personal data. Information may be shared with relevant third parties (e.g., insurance providers, professional regulators) only if required by law or necessary to comply with professional obligations.

Consent: We will seek your explicit consent before sharing any sensitive information with other professionals, except in situations where we have a legal obligation to disclose data (e.g., safeguarding concerns).
 
6. Your Rights
Under GDPR, you have the right to:

• Access your personal data.
• Rectify incorrect or incomplete data.
• Request erasure of your data (where legally permissible).
• Restrict processing under certain circumstances.
• Object to certain types of data processing.
• Data portability, where applicable.
  If you wish to exercise any of these rights, please contact us using the details provided below.

 
7. Contact Us
If you have any questions about this policy or would like to exercise your data protection rights, please write to us:

Yve Pattenden Hypnotherapy
2 Mayfield Rd, Port Isaac PL29 3RT

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

Thank you for reading this Privacy Policy.
By engaging with Yve Pattenden Hypnotherapy services or using the website, you consent to the collection and use of your information in accordance with this policy.