Confidentiality & GDPR

Hampshire Hypnotherapy Confidentiality and GDPR

For the purposes of data protection law, the data controller is Mrs Erica Ysanne Walsh, Hampshire Hypnotherapy.

I am registered with the Information Commissioner’s Office (ICO) under registration reference ZB972794. My registration is current from 30 August 2025 to 29 August 2026.

In order to provide therapy safely and appropriately, I may collect and hold personal information such as your name, contact details, and relevant information about your health and wellbeing. Information relating to physical or mental health is treated as special category data and is given additional protection under UK data protection law. 

Your information is used only for purposes connected with the service I provide. This may include responding to enquiries, arranging appointments, keeping brief clinical records, and communicating with you where necessary. Under the UK GDPR, privacy information should explain why personal data is collected, how long it is kept, and whether it is shared with anyone else. 

Any records I keep are stored with care and only for as long as necessary in connection with the service I provide. The ICO does not set fixed retention periods in most cases, but says organisations must be able to justify how long they keep personal data and should not keep it for longer than they need it. 

I do not share your personal information with third parties unless I am required to do so by law, or where there is a serious safeguarding, ethical, or legal reason that makes disclosure necessary.

Under the UK GDPR, you have rights in relation to your personal data. These include the right to be informed about how your information is used, and in some circumstances rights of access, correction, restriction, objection, erasure, and complaint to the ICO. 

If you have any questions about confidentiality or how your information is handled, please feel free to ask.