Aspyre Hypnotherapy Privacy Notice

Your Privacy Matters

At Aspyre Hypnotherapy, your privacy is important. We are committed to protecting your personal data and handling it with care, transparency, and respect.

This Privacy Notice explains how your information is collected, used, and stored in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Use and Access Act 2025 (DUAA 2025).

Who We Are

Aspyre Therapy Solutions Limited, trading as Aspyre Hypnotherapy, is responsible for your personal data.

Data Controller: Maria Manzo
Business Name: Aspyre Therapy Solutions Limited
Email: maria.manzo@aspyrehypnotherapy.com
ICO Registration Number: ZB948628

We are registered with the Information Commissioner’s Office (ICO) and comply with all applicable UK data protection laws.

What Information We Collect

To provide safe and effective hypnotherapy, we may collect:

Personal Details

  • Name

  • Date of birth

  • Gender

Contact Information

  • Phone number

  • Email address

  • Home address

Health & Therapy Information (Special Category Data)

  • Medical history

  • Lifestyle information

  • Psychological history

  • Session notes

Additional Information

  • GP details and/or emergency contact (where appropriate)

This may include information relating to both you and, where applicable, your child.

Why We Collect Your Data

We collect and process your information to provide safe, ethical, and effective hypnotherapy services.

We rely on the following lawful bases:

  • Contractual Necessity – to deliver the services you have requested

  • Legitimate Interests – to maintain clinical records and ensure safe practice

  • Health Care Provision (Article 9 UK GDPR) – for therapeutic support

  • Consent – where required (e.g. marketing or optional communication)

  • Safeguarding & Vital Interests (DUAA 2025) – where necessary to protect you or others from serious harm

You can withdraw consent at any time where consent is the legal basis.

Confidentiality

Everything you share in hypnotherapy sessions is treated as confidential.

Confidentiality may only be broken if:

  • There is a risk of harm to you or others

  • We are required to do so by law

  • We consult with a clinical supervisor (fully anonymised)

Sharing Your Information

Your data is never sold or shared for marketing purposes.

We only share information where necessary:

  • With your explicit consent (e.g. GP or other professionals)

  • Where there is a legal obligation

  • Where there is a safeguarding concern

  • With secure service providers (e.g. booking or storage systems)

All third parties are required to keep your data secure and confidential.

How Your Data Is Stored

We take appropriate steps to keep your data safe.

Physical Security

  • Paper records stored in locked filing cabinets

Digital Security

  • Encrypted systems

  • Password-protected devices

  • Secure cloud-based storage compliant with UK standards

Access to your data is strictly limited.

How Long We Keep Your Data

In line with guidance from the National Council for Hypnotherapy (NCH):

  • Adult records: 8 years after your final session

  • Child records: Until age 25 (or 26 if aged 17 when last seen)

Due to insurance and legal requirements, data cannot be deleted before this time.

After this period:

  • Digital data is securely deleted

  • Paper records are securely destroyed

Your Rights

You have rights under UK GDPR and DUAA 2025, including the right to:

  • Access your personal data

  • Request corrections

  • Request deletion (where legally possible)

  • Restrict or object to processing

  • Withdraw consent

  • Request transfer of your data

Requests are typically responded to within 30 days.

Contact with You Outside Sessions

If we see each other outside of a session, your privacy will be respected. We will not initiate contact, but you are welcome to do so if you wish.

Working with Other Professionals

We will only share your information with other professionals (such as your GP) with your written consent, unless required for safeguarding or legal reasons.

Complaints

If you have any concerns, please contact us directly so we can resolve the issue.

You also have the right to contact the Information Commissioner’s Office (ICO):

https://ico.org.uk

Medical Disclaimer

Hypnotherapy is not a substitute for medical advice or treatment.

If you have concerns about your health, please contact your GP or a qualified healthcare professional.

If you have any questions about your data, please feel free to get in touch.