General Data Protection Regulations (GDPR)

PRIVACY POLICY

Privacy Notice

This Privacy Notice explains how Stay Well Hypnotherapy collects, stores, uses and protects your personal information when you use hypnotherapy services.

Stay Well Hypnotherapy is committed to protecting your privacy and handling your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and any subsequent amendments.

By providing your personal information, you acknowledge that you have read and understood this Privacy Notice.

Data Controller

The Data Controller responsible for your personal information is:

Sarah Watt

Stay Well Hypnotherapy

10 School Road
Lower Brynamman
Brynamman
Ammanford

Email: sarah.watt@staywellhypnotherapy.co.uk

Telephone: 07848 373916

Website: www.staywellhypnotherapy.co.uk

What Information Do I Collect?

In order to provide safe and effective hypnotherapy services, I may collect and process the following information:

Personal Information

Name, Address, Telephone number, Email address, Date of birth,  Emergency contact details (where appropriate), GP details,

Special Category Information

As part of providing therapeutic services, I may collect information relating to:

Physical health, Mental health and wellbeing,  Medical history, Current medications, Lifestyle factors relevant to treatment, Information relating to family members or significant relationships where relevant to your therapy

Session Records

I may maintain brief professional notes relating to:

Assessment information, Treatment goals, Session summaries

Progress throughout therapy

I only collect information that is relevant and necessary for the provision of my services.

Lawful Basis for Processing Your Information

Under UK GDPR, I must have a lawful basis for processing your personal information.

The lawful basis relied upon is Legitimate Interests.

I process your personal information where it is necessary for the provision of safe, professional and effective hypnotherapy services.

This includes:

Managing appointments, Maintaining client records, Providing hypnotherapy services

Communicating with clients

Meeting insurance requirements

Meeting legal obligations

I only collect information that is necessary for these purposes and take appropriate steps to minimise any impact on your privacy.

Special Category Data

Information concerning your health is classified as Special Category Data.

Where health information is processed, this is necessary for the provision of therapeutic care and appropriate safeguards are in place to protect your information.

Where required, explicit consent will be obtained before sharing information with third parties.

How Your Information Is Used, 

Your information may be used to:

Arrange and manage appointments, Deliver hypnotherapy services, maintain professional records, Provide follow-up support, Create personalised recordings where requested, Meet insurance requirements, Meet legal obligations, Respond to enquiries from you, Safeguard clients where necessary

Your personal information will never be sold or shared for marketing purposes.

How Long Is Information Retained?

Client records are retained for:

Eight years following the completion of therapy for adult clients.

Until a child client's 25th birthday.

At the end of the relevant retention period, records will be securely destroyed or permanently deleted.

The retention period reflects legal, insurance and business record-keeping requirements.

Storage and Security of Information

Appropriate technical and organisational measures are in place to protect your personal information.

These measures include:

Password-protected devices, Secure email systems with two-factor authentication where available, Secure storage of electronic records, Password-protected documents where appropriate, Secure disposal of confidential information, Restricted access to client records, Paper documents are minimised wherever possible and securely destroyed when no longer required.

Confidentiality

Everything discussed during therapy sessions is treated as confidential.

To support professional practice, I may discuss aspects of my work with a professional supervisor. Any discussions are conducted in a manner that protects your identity and confidentiality.

No identifying information will be disclosed unless there is a legal or safeguarding obligation to do so.

Contact Outside Sessions

If we meet outside of therapy sessions, I may acknowledge you with a smile or greeting but will not initiate conversation regarding your therapy in order to protect your confidentiality.

You are free to disclose your therapy to others should you choose to do so.

Sharing Information With Other Professionals

Your information will only be shared with healthcare or wellbeing professionals with your consent unless there is a legal, ethical or safeguarding reason requiring disclosure.

Examples may include:

Contacting your GP, Communicating with another healthcare professional involved in your care, Coordinating care with another practitioner at your request

Where possible, your consent will always be obtained beforehand.

Circumstances Where Confidentiality May Be Broken

There are limited circumstances where I may be required to disclose information without your consent.

These include:

Where there is a serious risk of harm to yourself.

Where there is a serious risk of harm to another person.

Safeguarding concerns involving children or vulnerable adults.

Where disclosure is required by law.

Where a valid court order requires disclosure.

Where disclosure is necessary for the prevention or detection of serious crime.

Where appropriate and safe to do so, I will aim to discuss this with you first.

Your Rights Under UK GDPR

You have the right to:

Request access to your personal information.

Request correction of inaccurate information.

Request restriction of processing in certain circumstances.

Object to processing in certain circumstances.

Request erasure of your information where applicable.

Request transfer of your information where applicable.

Lodge a complaint regarding how your information has been handled.

Please note that some rights are subject to legal, insurance and record-keeping obligations which may require records to be retained.

Subject Access Requests (SARs)

You have the right to request a copy of the personal information that I hold about you.

Requests should be made in writing by email or post.

I will respond within the timescales required under UK GDPR and will conduct reasonable and proportionate searches for relevant information.

Proof of identity may be requested before information is released.

Data Protection Complaints Procedure

If you have concerns regarding how your personal information has been collected, stored, used or shared, you have the right to make a Data Protection Complaint.

Complaints can be submitted:

By email to: sarah.watt@staywellhypnotherapy.co.uk

By post to:

Stay Well Hypnotherapy
10 School Road
Lower Brynamman
Brynamman
Ammanford

I will:

Acknowledge your complaint within 30 days.

Investigate the matter without undue delay.

Contact you if further information is required.

Inform you of the outcome once the investigation has been completed.

If you remain dissatisfied following my response, you have the right to escalate your complaint to the Information Commissioner's Office (ICO).

Information Commissioner's Office (ICO)

Website: https://ico.org.uk

Telephone: 0303 123 1113

Address:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Changes to This Privacy Notice

This Privacy Notice may be updated from time to time to reflect legal, regulatory or operational changes.

The most current version will always be available on the Stay Well Hypnotherapy website.

Last Updated: June 2026