Client privacy policy

How will my data be stored?

In May 2018 the Data Protection Act was replaced by the General Data Protection Regulations (GDPR). Ana Bradley Hypnotherapy is GDPR registered. The changes to the Data Protection Act are aimed at ensuring that your personal, confidential, and sometimes sensitive data, is held privately and securely. This means that any data you give to Ana Bradley must be processed in a way that you agree with. GDPR exists to protect your rights as a consumer. It applies to your identifiable data, for example your name and address and any reasons you might have for visiting Ana. It also covers any session records, text messages or emails between Ana and yourself.

How long will you hold my information for?

As a Solution Focused Hypnotherapy registered member of the National Council for Hypnotherapy (NCH) and the Association for Solution Focused Hypnotherapy (AfSFH) and as a requirement for insurance purposes, Ana is bound by their regulations regarding the length of time she must hold onto your information. These state that she must keep your data stored securely for 8 years after your final session. However, the rule for children is different and Ana must keep their data until their 25th birthday. The exception to this rule applies to young adults whose treatment ends when they are 17 years old when Ana must keep their records until they reach their 26th birthday. Client records will be destroyed in the January after the dates given above. This is in line with NHS regulations for holding data.

What if I would like my data to be destroyed before this date?

Under the GDPR rules, you are able to request the deletion of any of your records at any time. Simply write to Ana requesting that your records are destroyed and once she has confirmed your identity, she will action your request. There is no charge for this service. Ana will ensure that all your paper records are shredded with a cross shredding machine. Any electronic data held by Ana, such as emails or texts will be permanently deleted from the devices they are stored on. NB. If you request the deletion of any of your records, she will retain a written copy of the deletion request on file for insurance purposes.

Am I able to see or get a copy of the information held by you?

In line with GDPR, if you send Ana a request in writing, specifying the data you wish to see, she will supply you with a copy of the data within 30 days. Ana will need to confirm your identity before sending you the information. There will be no charge for this service. NB Ana’s insurance company’s legal team may wish to verify any information Ana sends out.

What are your Reasons for collecting this information?

Ana aims to offer the highest quality support to her clients and in order to do so she will collect the following information:

  • An idea of what issues you are seeking her help with and what you would like to achieve from your hypnotherapy sessions.
  • A small amount of personal medical information.
  • Brief session notes.
  • Your contact details and those of your emergency contact.
  • GP contact details
  • Some basic information about your important others.

It is also a condition of Ana’s insurance policy cover that she takes and maintains accurate brief descriptive client consultation records. She will seek your permission before gathering personal information. This information will allow Ana to provide continuity within your sessions in order to help you towards your therapeutic goal. Ana will only use your contact details, address, and GP details with your explicit consent (See client agreement and initial consultation).

How do I know that you will store my information securely?

As a Solution Focused Hypnotherapy registered member (NCH) and the Association for Solution Focused Hypnotherapy (AfSFH), Ana is bound by their regulations regarding holding data securely.

  • Electronic notes/ information will be kept on a computer/ laptop which is secure password protected and accessible only by Ana.
  • Paper session notes will be stored in a locked filing cabinet.
  • Text/ WhatsApp messages will be via Ana’s mobile phone which is secured with fingerprint recognition or passcode.
  • Emails will be via Ana’s email account which requires a username and password for access.

Are our discussions within the hypnotherapy sessions confidential?

Everything you discuss with Ana during your sessions will remain strictly confidential. Occasionally, it may be necessary for Ana to seek support from her supervisor on a particular aspect of your hypnotherapy, in which case she will anonymise your details. Ana’s supervisor is also registered with the ICO and abides by GDPR requirements. In certain circumstances if Ana believes that you are about to harm yourself or another, she has a “Duty of Care” towards her clients and would be required to inform the relevant authorities. However, she would aim to discuss this with you before taking any action. Legally, Ana would also have to provide the police with information as set out in a warrant or court order, should the situation arise.

What if I see you outside of a hypnotherapy session?

Under GDPR regulations, Ana is bound to protect your confidentiality at all times. In public she may acknowledge you, but it would be ideal if any further conversation could be avoided. However, if you wish to discuss your therapy with other people, that is your choice and you are welcome to do so.

Will you discuss information about me with other health and social care professionals?

Ana is only able to contact other health and social care professionals with your written consent and would require your signature in line with GDPR requirements to notify them that you have entered into a therapeutic relationship with Ana or to notify them that your therapy has been successfully concluded. However, please see the section above regarding confidentiality and Ana’s “Duty of Care” to her clients for exceptions when it may be necessary to inform relevant authorities.

Who is the Data Controller and what is their ICO registration number?

The Data Controller is Ana Bradley, Ana Bradley Clinical Hypnotherapy. This policy was last updated 01-11-2023. It may be updated at any time, so please check back regularly to ensure that you’re aware of the latest version. Please note that the cookie policy for is available to view online.

ICO Registration number: C1186427

Signed Ana Bradley

Date: 06-12-2022