Data Protection Privacy Notice – Susan Grainger Hypnotherapy

The personal information you have provided when beginning a course of therapy sessions will only be used by Susan Grainger as data controller and processor, in accordance with General Data Protection Regulation 2018.

The personal data you require is your name, home address, email address and date of birth. Details of your family members, employment status and GP surgery. This information is kept securely in a locked filing cabinet in the office.

These details are kept confidential and shared only in a safeguarding situation when they may be shared with the Police, Social Care or a medical professional in order to keep you safe. This is a statutory duty of care. Unidentifiable material may be used in case studies.

All clinical notes will be retained for 7 years AFTER the end of therapy in accordance with Holistic Insurance company guidelines. After that said retention period, they will be disposed of as confidential waste.

The GDPR provides the following rights for individuals:

  1. The right to be informed
  2. The right of access
  3. The right to rectification
  4. The right to erasure
  5. The right to restrict processing
  6. The right to data portability
  7. The right to object
  8. Rights in relation to automated decision making and profiling

If you wish to remove your agreement to my use of your data in this way at any point please let me know by phone 07512 762546 or email

If you have any concerns about how I have handled your data, you can raise it with me in the first instance and if you are still not happy you can contact the Information Commissioners’ Office (ICO)