Who ‘I’ / ‘We’ are
I, Kail Shanker of Ideal Hypnotherapy, comply with my obligations under the General Data Protection Regulation (GDPR) by keeping personal data up to date; by storing (and destroying it) securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
My website address is: https://idealhypnotherapy.com
I use your personal data for the following purposes
To deliver the services that clients have requested;
To contact clients as necessary in accordance with the services they have requested;
To contact clients via surveys to ascertain their opinions on the service they received from me.
To maintain my own accounts and records.
N.B. In the event that our recorded data is utilised for research purposes, our own supervision or for the instruction or tuition of students, all such data will be sufficiently anonymised to the extent that individual clients cannot be identified. Should a client indicate that their data should not be used for these purposes, I will refrain from using that data.
Client data will never be passed to a third party without the client’s express consent, always assuming that such confidentiality is not in contravention of any legal action or legal requirement.
The therapist will ensure confidentiality is maintained at all times unless there are exceptional circumstances, which include a safeguarding risk posing a serious threat to the client or others. The therapist will only share information with your GP (or other healthcare professional) with the client’s written agreement.
Information on you kept by the therapist under GDPR is purely for the pursuance of both parties’ legitimate interests. You can request access to a copy of your data stored by the therapist at any time and also ask for its deletion, in writing (by email), if you prefer.
My Lawful Basis for processing your personal data
The client has given clear consent for me to process their personal data for a specific purpose. Further, the processing is necessary for both their and my legitimate interests.
Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
The right to request a copy of the personal data which I hold on you;
The right to request that I correct any personal data if it is found to be inaccurate or out of date;
The right to request your personal data is erased where it is no longer necessary for me to retain such data;
The right to withdraw your consent to the processing at any time;
The right to request that I provide you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), (where applicable) [N.B. This only applies where the processing is based on consent or is necessary for the performance of a contract with the data subject and in either case the data controller processes the data by automated means]. The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
The right to object to the processing of personal data, (where applicable) [N.B. This only applies where processing is based on legitimate interests (or the performance of a task in the public interest/exercise of official authority); direct marketing and processing for the purposes of scientific/historical research and statistics]
The right to lodge a complaint with the Information Commissioner’s Office. (See below).
Feedback and Complaints Procedure
If you have any questions, concerns, or feedback regarding the service I provide—including matters related to data privacy or handling—I encourage you to reach out to me directly. You’re welcome to do so through the Contact page, after a session, or by phone/text. I will do my utmost to address your concerns promptly, offer clarification, or investigate further if needed.
If you wish to complain about any aspect of my work or Ideal Hypnotherapy, please contact me in the first instance. I am committed to handling all complaints respectfully, confidentially, and constructively and professionally. While you are free to pursue any official complaints process at any time, I kindly ask that you allow me the opportunity to address your concerns first, in line with general best practice.
I value and welcome both positive feedback and constructive suggestions. Such input helps ensure the continued quality and benefit of my service.
Thank you for your understanding and cooperation.
Complaints Notice
Under the GDPR, you have the right to be informed, the right of access, the right to erasure (after 7 years), and the right to data portability. If you believe I have processed your information incorrectly or without your consent, you have the right to complain to the Information Commissioner’s Office (ICO).
UK GDPR (DPA 2018) rules can be found at:Â https://ico.org.uk/for-organisations/guide-to-data-protection/
The client has the right to complain to the Independent Commissioner’s Office (ICO) if they believe there is a problem with how I handle their data (see https://ico.org.uk/concerns/handling/).
Comments
When visitors leave comments on the site, I collect the data displayed in the comments form and the visitor’s IP address and browser user agent string to assist in spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After your comment is approved, your profile picture will be visible to the public in the context of your comment.
Media
If you upload (personal) images to the website, I will avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website. General pics from Adobe and Pexels as used in this website are open sourced and freely downloaded by me, according to their offer and free service terms.
Cookies
If you leave a comment on my website, you may opt in to saving your name, email address and website in cookies. These are for your convenience, so you don’t have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content, such as videos, images, and articles. Embedded content from other websites behaves in the same way as if the visitor had visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who I share your data with
If you request a password reset, your IP address will be included in the email used for the password reset.
How long I retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This allows us to automatically recognise and approve any follow-up comments, rather than holding them in a moderation queue.
For users who register on our website (if any), we also store the personal information they provide in their user profiles. All users can see, edit, or delete their personal information at any time (except that they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data that we are required to retain for administrative, legal, or security purposes.
Where your data is sent
Visitor comments may be checked through an automated spam detection service.
Â