Privacy Policy

At Amanda Graham Hypnotherapy, your privacy and trust are important to me. This policy explains how your personal information is collected, used, and protected when you visit the website or make contact with me.

​

I comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and any other applicable data protection laws.

​

1. Information I collect

​

I may collect the following types of information:

    •    Contact details: such as your name, phone number and email address
   •    Health information: relevant to the issue you’re seeking support for (only if you choose to provide it)
   •    Website usage data: such as pages visited, time on site, and browser type (via cookies and analytics)
   •    Payment details: if you book and pay for a session, this may include card or transaction info (handled securely via third-party processors)

​

2. How your data is used

​

Your personal data may be used to:

    •    Schedule and manage appointments
   •    Provide tailored therapeutic support
   •    Send session reminders or follow-ups
   •    Respond to enquiries
   •    Process payments
   •    Improve website performance and understand how visitors use the site (through analytics tools)

​

I will never use your personal data for direct marketing unless you’ve explicitly opted in.

​

3. Cookies & website tracking

​

This website uses cookies – small text files stored on your device – to help improve your experience and analyse how the site is used.

 

Types of cookies used may include:

    •    Essential cookies – for site functionality and navigation
   •    Performance cookies – to track site usage and improve content
   •    Preference cookies – to remember user settings

​

You can control or delete cookies at any time through your browser settings. To learn more, visit www.allaboutcookies.org.

​

4. Lawful basis for processing

​

Data is only collected and processed when there is a lawful reason to do so, such as:

    •    Consent: when you choose to contact me or share your information voluntarily
   •    Contract: to deliver hypnotherapy sessions or other services you’ve requested
   •    Legitimate interests: such as maintaining client records or protecting legal rights
   •    Legal obligations: e.g. keeping records for tax or insurance purposes

​

5. How your information is stored

​

Your data is stored securely using:

    •    Encrypted devices (e.g. password-protected smartphone or laptop)
   •    Secure platforms (e.g. Wix website database, Meta Business Suite for messages via Facebook/Instagram)
   •    Secure payment gateways (where applicable)

 

I take all reasonable precautions to keep your data safe and confidential. Only Amanda has access to your personal data.

​

6. How long your data is kept

    •    Enquiry data (if you don’t proceed with sessions) is deleted after 12 months
   •    Client records are stored for up to 7 years after your last session in line with insurance and professional guidelines

 

After this, your data is securely deleted or anonymised.

​

7. Sharing your information

​

I will never sell or trade your personal data.

​

Your data may be shared only:

 

• With trusted third-party service providers (e.g. website or payment platforms) who are GDPR-compliant and only process data on my behalf

• If required by law, such as to comply with a legal obligation or protect vital interests

• With your explicit consent

​

In very rare cases – such as safeguarding concerns – I may share relevant information with authorities if someone is at risk. I will always try to speak with you first unless legally prohibited.

​

8. Your rights

​

Under data protection law, you have the right to:

    •    Request access to the data I hold about you
   •    Ask for inaccurate or incomplete data to be corrected
   •    Request erasure of your data (in certain circumstances)
   •    Object to or restrict processing
   •    Withdraw consent at any time (if processing is based on consent)
   •    Complain with the Information Commissioner’s Office (ICO) at www.ico.org.uk

​

To exercise your rights, just email me at amandagrahamhypnotherapy@gmail.com

​

9. Changes to this policy

​

This policy may be updated occasionally to reflect changes in the law or business operations. Any updates will appear on this page with a new “effective date.”

​

If you have any questions about this policy or how your information is handled, please get in touch. I’m always happy to explain things clearly.

​

This policy is effective from June 2025.