General Data Protection Regulation (GDPR)
The information you provide to Meadows Hypnotherapy will only be used by Jo Watts (owner of Meadows Hypnotherapy), for purposes only relating to Hypnotherapy treatment by Jo Watts.
Your information will not be shared with any 3rd parties, with the exception of my supervisor, who also follows GDPR regulations, or if I feel it necessary to contact your preferred emergency contact, or health care professional which will be purely for your welfare.
Only your preferred contact method and email will be used in all communication between you and I.
You have the right to change your contact preferences at any time, but must do this by email: jo@meadows-hypnotherapy.co.uk
Data protection and privacy policy
1. Data Controller
Jo Watts on behalf of Meadows Hypnotherapy (“we”, “us”) is the data controller responsible for your personal information. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.
2. What Data We Collect
We collect and process personal data including your name, contact details, date of birth, and special category data (health/ mental health information) for the purpose of providing counselling services. This data is processed on the lawful basis of contract and, where applicable, explicit consent for special category health data under Article 9 UK GDPR.
3. How We Use Your Data
Your data is used solely to deliver and administer your therapy sessions, maintain therapy records, comply with our professional obligations (e.g. safeguarding duties), and – where required — liaise with supervising bodies.
4. Data Retention
Therapy records are retained for:
- For adults – 5 years following the end of the therapeutic relationship
- For children – Until the child’s 25th birthday
This is in line with professional guidance and insurance stipulations. Records are then securely destroyed.
5. Your Rights
You have the right to access, rectify, or erase your personal data; to restrict or object to processing; and to data portability, subject to applicable exemptions. To exercise any of these rights, please contact us using the details below.
6. Data Protection Complaints
Under the Data (Use and Access) Act 2025 (Section 164A, Data Protection Act 2018), you have a statutory right to raise a data protection complaint directly with us before escalating to the Information Commissioner’s Office (ICO).
As a sole trader, I take your privacy and data protection right seriously. If you have any concerns or complaints regarding how I collect, store or use your personal data or session notes, please contact me directly in writing at jo@meadows-hypnotherapy.co.uk
In accordance with UK data protection laws, I will:
1 – Acknowledge your complaint in writing with 30 days.
2 – Investigate the matter thoroughly and respond to you without undue delay.
3 – Provide you with a clear outcome and explain any actions taken.
Please note that under current UK regulations, you are required to attempt to resolve any data protection grievances directly with me first. If we are unable to resolve the issue together, you retain the right to escalate your complaint to the ICO at ico.org.uk or by calling 0303 123 1113.