Privacy & Data Protection Policy

Last updated: June 2026

1. Introduction

This Privacy & Data Protection Policy explains how I collect, use, store, and protect your personal information when you visit this website or make an enquiry about hypnotherapy services. I am committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with the UK GDPR and Data Protection Act 2018.

By using this website, you consent to the practices described in this policy.

2. Who I Am

Raquel Carter Hypnotherapy
Owner / Practitioner: Raquel Carter
Email: [your email
Location: [optional address]

I act as the Data Controller for the personal data you provide.

3. What Personal Data I Collect

I may collect and process the following information:

3.1 Website Enquiries

When you contact me through a form or email:

Name
Email address
Phone number (if provided)
Any information you choose to include in your message

3.2 Client Information (if you begin therapy)

For the purposes of providing hypnotherapy services, I may collect:

Contact details
Date of birth
Medical information relevant to therapy
Session notes
Relevant personal history
Emergency contact details

3.3 Website Usage Data

This may include:

IP address
Browser type
Pages visited
Cookies (see section 9)

This information helps improve website performance and user experience.

4. How Your Data Is Used

Your personal data may be used for:

Responding to enquiries
Booking and managing appointments
Providing hypnotherapy services
Maintaining accurate clinical records
Ensuring safety and safeguarding
Administration and customer service
Legal or professional requirements (if applicable)

Your data will never be sold, shared for marketing purposes, or disclosed without a lawful reason.

5. Lawful Bases for Processing

Under GDPR, I use the following lawful bases:

Consent: when you submit an enquiry or agree to therapy
Contract: to deliver hypnotherapy services you have requested
Legal obligation: where records must be kept for regulatory or tax purposes
Vital interests: rare cases where safety is a concern
Legitimate interests: basic website functionality and business operations

6. How Your Data Is Stored

I store your information securely using:

Password-protected systems
Encrypted devices
Secure note-taking systems
Locked storage for any paper notes (if used)

Clinical records are kept separately from website or administrative data.

7. How Long Data Is Kept

Email enquiries: up to 12 months unless you request deletion sooner
Clinical records: up to 7 years after your final session (industry standard)
Financial records: 6 years (legal requirement)

After these retention periods, data is securely deleted or destroyed.

8. Sharing Your Information

Your information may be shared only when necessary:

With emergency services if there is risk of harm
With supervising bodies (anonymised unless safety is involved)
With legal or regulatory authorities if required by law

Your data is never shared for advertising, marketing, or with third parties without consent.

9. Cookies & Website Tracking

This site may use cookies and basic tracking tools to:

improve performance
analyse traffic
enhance user experience

You can adjust cookie preferences using your browser settings at any time.

10. Your Rights Under GDPR

You have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion (“the right to be forgotten”)
Restrict or object to processing
Withdraw consent at any time
Request data portability
File a complaint with the ICO (Information Commissioner’s Office)

ICO website: www.ico.org.uk

To exercise any of these rights, contact me at:
📧 [your email]

11. Links to External Websites

This website may contain links to external sites. I am not responsible for the privacy practices or content of those websites.

12. Changes to This Policy

This policy may be updated occasionally to reflect changes in regulations or practice. The latest version will always be available on this page.