Privacy Policy

1. Who we are

Mind Cloud Hypnotherapy is a sole-trader hypnotherapy practice based in Disley, Cheshire, operated by Lynda Robinson. In this policy, “we”, “us” and “our” refer to Mind Cloud Hypnotherapy.

If you have any questions about how we handle your personal data, please contact us:

• Website: mindcloudhypnotherapy.co.uk
• WhatsApp: via the link on our website
• Email: [email protected]

2. What personal data we collect

We may collect and process the following personal data:

• Your name
• Your contact details (email address, phone/WhatsApp number)
• Information you share with us about your health, wellbeing, or personal circumstances in the context of seeking or receiving hypnotherapy
• Any other information you voluntarily share with us

3. How we collect your data

We collect your data when you:

• Contact us via WhatsApp or email
• Submit an enquiry through our website contact form
• Attend a session (in person or online) with us

4. Why we collect your data

We use your personal data to:

• Respond to your enquiries
• Arrange and deliver hypnotherapy sessions
• Maintain records of your care, as required for professional practice
• Comply with our legal and professional obligations

Our legal basis for processing your data is:

• Legitimate interests, to manage and deliver our services
• Consent, where you have provided health or sensitive information
• Legal obligation, where we are required to retain records

5. Health and sensitive data

As a hypnotherapy practice, we may collect information about your physical or mental health. This is classed as “special category” data under UK GDPR. We collect this data only with your consent, and only to the extent necessary to provide you with appropriate care. We treat all such information with the strictest confidence.

6. How we store your data

Your data is stored securely. We do not store client records in unsecured formats. Paper records (if any) are kept in a secure, locked location. Electronic records are protected by appropriate access controls.

We will retain your records for a maximum of 7 years after your last session, in line with professional practice guidelines, after which they will be securely deleted or destroyed.

7. Sharing your data

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share your data only in the following circumstances:

• Where required by law or a regulatory authority
• Where necessary to protect your vital interests or the safety of others
• With your explicit consent

8. Your rights

Under UK GDPR, you have the following rights:

• The right to access the personal data we hold about you
• The right to have inaccurate data corrected
• The right to have your data deleted (where there is no legal requirement to retain it)
• The right to restrict or object to processing
• The right to data portability

To exercise any of these rights, please contact us using the details in Section 1.

9. Complaints

If you are unhappy with how we handle your personal data, you have the right to complain to the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to check this page periodically.