Privacy Policy for Soothe Hypnotherapy

Effective Date: 08 August 2025

At Soothe Hypnotherapy, your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services or interact with our website.

1. Who We Are

Soothe Hypnotherapy is a self-employed hypnotherapy practice owned and operated by Bran Malloch, based in Plymouth, UK.

If you have any questions about this policy, please contact:
Email: bran@soothehypnotherapy.co.uk
 

2. What Information We Collect

We may collect and process the following types of personal data:

Identity Information – name, date of birth

Contact Information – phone number, email address, home address

Health Information – relevant medical history, mental health information, lifestyle details (only with your explicit consent)

Session Notes – written records from therapy sessions

Website Data – IP address, browser type, and cookies (if applicable)

3. How We Use Your Information

We use your personal information to:

Provide hypnotherapy services to you

Keep accurate records of your treatment and progress

Contact you regarding appointments, billing, or service updates

Comply with any legal or regulatory requirements

Health and therapy-related information is always handled with strict confidentiality and used only with your informed consent.

4. Legal Basis for Processing

We process your data under the following lawful bases:

Consent – for collecting and processing health-related or sensitive data

Contract – to provide and manage your sessions

Legal Obligation – to comply with laws and regulations

Legitimate Interests – to run and improve our business responsibly

5. Data Storage and Security

All personal data is stored securely either in password-protected digital files or locked cabinets. I take appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction.

6. Sharing Your Information

Your personal information will never be sold or shared with third parties for marketing purposes.

We may share your information only in the following limited circumstances:

With your explicit written consent

Where required by law or court order

If there is a risk of serious harm to yourself or others (as part of a duty of care)

7. How Long We Keep Your Data

We retain your records for a minimum of 7 years after your last session, in line with professional guidelines and insurance requirements. After this period, your data will be securely destroyed.

8. Your Rights

Under the UK GDPR and Data Protection Act 2018, you have the right to:

Access the personal data we hold about you

Request correction of inaccurate information

Request deletion of your data (subject to legal or professional obligations)

Object to or restrict processing

Withdraw consent at any time

To exercise your rights, please contact us using the details above.

9. Cookies and Website Use

If you use our website, it may collect anonymous data via cookies to enhance user experience. You can control cookie settings through your browser.

10. Changes to This Policy

We may update this policy occasionally to reflect changes in the law or our business practices. The latest version will always be available on our website or provided upon request.

By using our services, you acknowledge that you have read and understood this Privacy Policy.