Privacy Policy

Last updated: October 6, 2025

1. Privacy Policy

Privacy Policy for Jill Kennedy Hypnotherapy Limited (SC804184)

Introduction
At Jill Kennedy Hypnotherapy Limited, your privacy is respected but our primary obligation is to ensure the smooth, safe, and responsible delivery of our services. This policy explains how your personal information is collected and used in line with UK GDPR.

What We Collect

We may collect:
• Your name, contact details, and preferred session times
• Information voluntarily disclosed about your health or emotional wellbeing
• Payment or billing information (via secure processors)
• Technical data from your device (cookies, browser, IP, etc.)

Why We Collect It
To:
• Confirm and manage your bookings
• Deliver hypnotherapy sessions safely and effectively
• Fulfil legal and clinical recordkeeping duties
• Monitor and improve the website
• Protect the business from risk

Legal Basis
We process your data under:
• Consent (for sensitive disclosures)
• Contract (to provide services)
• Legal obligation (e.g. HMRC, safeguarding)
• Legitimate interest (e.g. marketing or feedback)

Your Rights
You have the right to access, correct, or delete your personal data. However, please note that certain data (especially clinical notes or invoices) may be legally required to be retained for a period of time.

Data Sharing
We do not sell or share your personal data for any commercial purpose. Limited data may be shared with trusted service providers (e.g. email software, calendar booking apps, secure payment gateways) strictly for operational reasons.

Storage & Retention
All data is stored securely. Client records are retained for at least 7 years from last contact in line with best practice for health services. Website and newsletter data may be retained indefinitely unless you unsubscribe.

Contact
You can make a data request by emailing: jill@jillkennedyhypnotherapy.com