Privacy Notice

Who is responsible for your information?

The data controller is Glen Mitchell, trading as Freedom Formula Hypnotherapy Practice. You can contact me at glen.mitchell@gmtherapy.co.uk or 48 St Margaret's Avenue, Wolston, Warwickshire, CV8 3LJ.

Information I collect

I may collect your name, contact details, enquiries, appointment details, communications, assessment and consent information, session records, payment records and information you choose to provide about your wellbeing, health, circumstances and goals. Website and service providers may also generate limited technical and security information.

Physical and mental-health information is specially protected under data-protection law. Please do not put detailed or highly sensitive health information in the website form. I can discuss relevant information through a more appropriate channel after responding.

How and why I use information

I use information to respond to enquiries, assess suitability, arrange and deliver sessions, maintain appropriate records, take payment, meet legal and accounting responsibilities, protect safety and establish or defend legal rights.

My ordinary lawful bases may include taking steps at your request before a contract, performing a contract, legitimate interests, legal obligation and, where applicable, vital interests. When information concerns health or another special category, I rely on your explicit consent unless another condition permitted by law applies. You may withdraw consent by contacting me, although this may prevent me from providing a service that necessarily uses the information.

Sharing and confidentiality

I do not sell personal information. I may share only what is necessary with providers supporting email, forms, hosting, scheduling, storage, payments or accounts; professional advisers, insurers or supervisors; public authorities where legally required; or appropriate services where lawful disclosure is necessary to protect someone from serious harm.

The website form is currently processed by FormSubmit and emailed to my Outlook mailbox. Clarity call booking is provided by Calendly. When you use these services, their privacy terms also apply. Email and online services cannot be guaranteed completely secure, so please avoid sending unnecessary sensitive information.

International processing

Some technology providers may process information outside the United Kingdom. Where this occurs, I will take reasonable steps to ensure an appropriate transfer mechanism and safeguards are used.

How long information is kept

Information is kept only as long as reasonably necessary for the reason it was collected and for applicable legal, insurance, tax and professional requirements. Enquiries that do not become clients will normally be deleted within six months of the last meaningful contact. Client and accounting records may need to be kept longer. Retention is reviewed and information is securely deleted or anonymised when no longer required.

Security

I use reasonable measures including access controls, password protection, current software, secure storage and data minimisation. If a personal-data breach occurs, I will assess it and make any notification required by law.

Cookies

The core website is designed to work without non-essential cookies. The hosting provider may use strictly necessary technologies for security or reliable delivery. If analytics, advertising or other non-essential technologies are introduced, this notice will be updated and consent controls will be used where required. Calendly has its own cookie controls when you follow its link.

Your rights

Depending on the circumstances, you may have rights to be informed, access your information, correct it, request deletion or restriction, receive certain information in a portable format, object to some processing and withdraw consent. These rights are not absolute, and I may need to verify your identity.

To exercise a right, email glen.mitchell@gmtherapy.co.uk. You may also complain to the Information Commissioner’s Office, although I would appreciate the opportunity to address your concern first.

Adults only

The website and services are intended for adults aged 18 or over. I do not knowingly collect information from a child through the website.

Automated decisions and changes

I do not use personal information for solely automated decisions with legal or similarly significant effects. This notice may be updated when services, providers or legal responsibilities change. The latest version will appear here with its revision date.