Privacy Policy

​Introduction

​

This Privacy Policy explains how Seabreeze Hypnotherapy collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

Data Controller

​

Seabreeze Hypnotherapy, UK-based sole practitioner hypnotherapist

​​

Personal Data Collected

• Name, email address, phone number
• Information provided via website contact forms, email, WhatsApp, or in person
• Client intake forms and session notes
• Medical and mental health information relevant to treatment
• Website usage data via Google Analytics

 

How Data Is Collected

• Website contact forms
• Email and WhatsApp communications
• In-person consultations
• Google Analytics cookies

 

Lawful Basis for Processing Personal data is processed under:

​

• Contract
• Consent
• Legal obligation
• Legitimate interests

 

Special category health data is processed under:

​

• Explicit consent
• Health and social care provision (UK GDPR Article 9(2)(h))

 

How Your Data Is Used

• Respond to enquiries
• Provide hypnotherapy services
• Manage appointments and follow-up
• Maintain accurate clinical records
• Improve website performance

 

Testimonials

All testimonials used by Seabreeze Hypnotherapy are fully anonymised.

 

Data Storage and Security

Client data is stored in a password-protected MS Access database on a secured laptop. Access is restricted to the sole practitioner only.

 

Data Retention

• Client records: up to 7 years after last session
• Enquiry data: up to 12 months
• Analytics data: per Google Analytics retention settings

 

Your Rights

 

You have the right to access, correct, erase, restrict, or object to processing, withdraw consent, and complain to the Information Commissioner’s Office (ICO).

 

Cookies & Analytics

This website uses Google Analytics to collect anonymised usage data. Cookies can be controlled through browser settings.