At Becky Upton Hypnotherapy, your privacy is treated with the utmost care and confidentiality. This Privacy Policy explains how your personal data is collected, used, stored, and protected in accordance with the UK General Data Protection Regulation (UK GDPR).

1. Who I Am

Data Controller: Becky Upton
📧 Email: beckylouiseupton@gmail.com
📍 Address: 5 Hope Gardens, Lydden, CT15 7FA

​

2. What Data I Collect

When you engage in therapy or make an enquiry, I may collect the following information:

• Your name and contact details (email, phone number, address)

• Emergency contact details (if provided)

• Relevant health, lifestyle, and therapy-related information

• Session notes and progress records

• Payment information (where applicable)

​​

3. How Your Data is Used

Your personal data is used for the purpose of delivering professional hypnotherapy services, including:

• Managing your appointments

• Understanding your therapeutic goals and history

• Providing a tailored therapy experience

• Complying with legal, regulatory, and insurance obligations

​​

4. How Your Data is Stored

To ensure your information remains secure:

• Paper notes are stored in a locked cabinet.

• Digital records are encrypted and protected by password.

• Only Becky Upton has access to your information, unless explicit written consent is given.

​​

5. Confidentiality & Disclosure

All personal information and session content remains confidential unless:

• You disclose an intention to harm yourself or others

• You disclose intent to commit a serious criminal offence (e.g. terrorism, murder)

• I am legally compelled by a court order or statute

• Information is shared (anonymously) with my professional supervisor

Outside of these rare exceptions, confidentiality will always be maintained.

​

6. Your Rights Under GDPR

You have the right to:

• Access the data I hold about you

• Request corrections to inaccurate information

• Request deletion of your data (subject to legal/insurance retention requirements)

• Withdraw consent to data processing (where applicable)

Requests will be responded to within 30 days.

​

7. Data Retention

Your data is retained in line with professional and insurance guidelines:

• Adult clients: records kept for 8 years after the final session

• Clients under 18: records kept until their 25th birthday (or 26th if treatment ended at age 17)

​​

8. Data Sharing

Your personal information will never be sold or shared with third parties for marketing purposes. Information is only shared with third parties when:

• You give written consent

• Required by law

• Necessary for the safeguarding of yourself or others

​​

9. Data Breaches

If a data breach occurs:

• You will be notified as soon as possible

• Any serious breach will be reported to the Information Commissioner’s Office (ICO) within 72 hours

​​

10. Cookies & Website Usage

This website (www.beckyuptonhypnotherapy.co.uk) may use cookies to enhance your browsing experience. You can choose to disable cookies through your browser settings. No personally identifiable information is collected without your consent.

​

11. Complaints

If you have concerns about how your data is handled, please contact me directly.
You also have the right to lodge a complaint with the UK’s Information Commissioner’s Office (ICO):
🌐 www.ico.org.uk | 📞 0303 123 1113

​

12. Updates to This Policy

This policy may be updated from time to time. Any significant changes will be posted on this page. Please check back periodically to stay informed.