Consent to handle Personal Information

Processing of your personal information - Consent.

I hereby consent to the processing of my personal data by Mindscape and agree to the privacy policy outlined below. 

All information is stored electronically at EasyPractice (https://easypractice.net/).

Privacy Policy for Mindscape Hypnotherapy

At Mindscape Hypnotherapy, we are committed to protecting your privacy and ensuring that your personal data is handled in compliance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, and other applicable data protection laws. This Privacy Policy outlines how we collect, use, and protect your personal information when you engage with our hypnotherapy services, including through our website, online sessions, and communications.

1. Data Controller

Mindscape Hypnotherapy (referred to as “we”, “us”, or “our”) is the data controller responsible for the personal data that we collect and process.

2. Personal Data We Collect

We collect and process the following types of personal data:

• Contact Information: Full name, email address, phone number, and postal address.
• Session Information: Details provided during hypnotherapy sessions, such as goals, issues discussed, and any other relevant personal or sensitive data.
• Payment Information: Billing details, transaction data, and payment method information.
• Technical Data: IP address, browser type, time zone settings, and operating system as collected through cookies and other tracking technologies on our website.
• Communication Data: Records of any correspondence between us, including emails, messages, and any feedback provided.

We collect personal data either directly from you when you provide it through our website, during online sessions, or through email communications, or automatically via cookies when you use our website.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• To Provide Services: To schedule and conduct online hypnotherapy sessions, including pre-session consultations and follow-up support.
• To Communicate with You: To send booking confirmations, reminders, and information related to your sessions or our services.
• To Process Payments: To handle billing, invoicing, and transaction processing.
• To Improve Our Services: To assess and improve the quality of our services, including understanding client needs and preferences.
• To Comply with Legal Obligations: To meet legal and regulatory requirements, such as financial reporting or compliance with data protection laws.
• Marketing (with Consent): To send you updates, newsletters, or promotional offers related to our services, if you have opted-in to receive such communications.

4. Legal Basis for Processing Personal Data

We rely on the following legal bases for processing your personal data:

• Contractual Necessity: To provide you with our services, including booking and conducting hypnotherapy sessions.
• Consent: Where you have given explicit consent for us to process sensitive personal data (such as details shared during sessions) or to send marketing communications.
• Legitimate Interests: For administrative, operational, and improvement purposes, as well as ensuring a secure and functional website.
• Legal Compliance: To fulfil legal obligations, such as retaining records for tax purposes or responding to legal requests.

5. Sharing Your Personal Data

We do not sell or rent your personal data to third parties. We may share your data with:

• Service Providers: Third-party platforms we use to provide our services (e.g., video conferencing platforms, payment processors). These providers are required to comply with applicable data protection laws and are only allowed to process data on our behalf.
• Legal Authorities: If required by law, we may share your data with law enforcement or government agencies to comply with legal obligations.

6. International Data Transfers

As we provide services to clients worldwide, your personal data may be transferred to, and processed in, countries outside the UK or the European Economic Area (EEA). Where such transfers occur, we ensure that adequate safeguards are in place to protect your data, including standard contractual clauses approved by the European Commission or equivalent legal mechanisms.

7. Data Retention

We retain personal data only for as long as is necessary for the purposes outlined in this Privacy Policy. Typically, we retain:

• Client Information: For up to seven (7) years after your last session to comply with legal obligations and for administrative purposes.
• Payment Data: As required for financial records and audits, typically up to seven (7) years.

8. Your Data Protection Rights

Under GDPR and applicable UK law, you have the following rights:

• Right to Access: You may request access to the personal data we hold about you.
• Right to Rectification: You have the right to correct any inaccurate or incomplete data.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You have the right to request the restriction of processing of your data in certain conditions.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your data where we rely on legitimate interests, or to receiving direct marketing.
• Right to Withdraw Consent: If processing is based on your consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the contact details below.

9. Security of Your Data

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, alteration, or disclosure. This includes encryption, secure data storage, and strict access controls.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website, track usage, and personalise content. You can manage your cookie preferences through your browser settings. For more information, please see our Cookie Policy.

11. Third-Party Links

Our website may contain links to external websites. Please note that we are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any websites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website, and, where appropriate, notified to you via email or other means. Please review this Policy periodically to stay informed about how we are protecting your data.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Mindscape Hypnotherapy
ask@livethejourney.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe that we have not handled your data in accordance with the law.

This Privacy Policy was last updated on 01st September 2024.