Lisa Hopson of LisaLife (Hypnotherapy, NLP & EFT) is committed to protecting your privacy and ensuring that your personal data is handled in accordance with the Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

This policy explains how I collect, use, store, and protect your personal data, when you visit my website, schedule hypnotherapy sessions, or interact with me in any way. Please review this policy carefully.

Please note, for services relating to those under the age of 18, please see the ‘Children and Young People Privacy Policy’. This will be communicated to parents/guardians following initial contact but is also available upon request.  

 

1. Who I Am

I [Lisa Hopson of LisaLife] am the data controller responsible for your personal data. I provide hypnotherapy, NLP, EFT, and coaching services online or in-person.  

 

2. What Information I Collect

I collect personal data that is necessary to provide effective hypnotherapy and related services. This may include:

• Personal Identification Information: Your name, email address, phone number, and home address.

• Medical & Health Information: Details of any relevant physical or mental health conditions (including treatments, medications, or previous therapy), necessary for providing safe, effective and personalised therapy sessions.

• Session Notes: Any notes or observations taken during sessions that relate to your treatment plan.

• Payment Information: Transaction details when you purchase services

 

3. How I Use Your Information

Your personal information is used to:

• Deliver Services requested: To provide and tailor services according to your specific needs

• Maintain Accurate Records: To ensure compliance with professional standards, and legal obligations.

• Contact and communication: To communicate with you about appointments, treatment plans, or related services

• Process Payments: To facilitate secure payments

• Improve My Services: To enhance my services by getting feedback on your experiences.

I will only use your information for these purposes and will never sell or share it without your explicit consent, except where required by law.

 

4. Legal Basis for Processing Your Data

I collect and process your personal data under the following lawful bases:

• Contractual: To provide hypnotherapy, NLP, EFT, and related services as part of our therapeutic agreement.

• Consent: For the collection of sensitive data (e.g., health-related information), which requires your explicit consent.

• Legitimate Interests: To manage my business, maintain client records, and ensure the quality of service.

• Legal Obligations: To comply with legal requirements, such as tax reporting and professional obligations.

 

5. How I Store & Protect Your Data

I am committed to ensuring that your data is stored securely. I take appropriate reasonable precautions are taken to protect it from loss, misuse, or unauthorised access. I adhere to appropriate technical and organisational security measures to protect your personal information, including:

• Paper Records: Stored in a secure, locked cabinet.

• Electronic Records: Stored on a password-protected computer system or secure cloud storage.

 

6. Data Retention

I will retain your personal data only for as long as necessary to provide services and comply with legal and regulatory obligations. Records are typically kept for seven years following your last therapy session, (For clients under the age of 18, data will be retained until their 25th birthday). After this period, your data will be securely deleted or destroyed.

 

7. Data Sharing

Your personal data will not be sold, distributed, or leased to third parties. I will only share your personal data with third parties:

• When required by law (e.g., in the case of safeguarding concerns or legal reporting).

• With your explicit consent, such as referrals to other healthcare providers.

Any third parties I share data with are required to adhere to the same data protection standards and protect your data in accordance with GDPR.

N.B. In the event that our recorded data is utilised for my own supervision all such data will be sufficiently anonymised to the extent that individual clients cannot be identified.

 

8. Third-Party Links

My website may contain links to other websites of interest. However, once you use these links to leave my site, I am not responsible for the protection and privacy of any information you provide on those sites. Please review the privacy policies of those external websites.

 

 9. Your Rights

Unless subject to an exemption under the GDPR, you have several rights under data protection laws, including:

• Access: You may request details of the personal data I hold about you.

• Correction: You may request correction any inaccurate or incomplete data.

• Erasure: You may request that I delete your data, provided there is no overriding legal reason for me to retain it.

• Objection: You may object to the processing of your data in certain circumstances, such as for direct marketing.

• Right to Withdraw Consent: Where you have provided consent for data processing, you can withdraw it at any time, although this may effect my ability to provide services.

• Complaint: you have the right to lodge a complaint with the Information Commissioners Office. (See below).

To exercise any of these rights, please contact me using the details provided in this policy (see section 12).

 

10. Complaints

If you have concerns about how your data is handled, please contact me. If you think there is a problem with the way your data is being handled, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.​

 

11. Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in my practices or for other operational, legal, or regulatory reasons. Any changes will be communicated on this webpage, and I encourage you to review the policy regularly.

 

12.  Contact Me

If you have any questions or concerns about this Privacy Policy or your personal data, please contact me at:

Lisa Hopson, LisaLife Hypnotherapy. NLP & EFT

        20 Prigg Walk, Bury St. Edmunds, Suffolk IP32 6PP
        hello@lisalife.co.uk
        07581 204009