Privacy Policy

Last updated: 10/08/2025

This privacy policy explains how I, Estelle Carey at Karuna Hypnotherapy, collect, use, and protect your personal information.

1. Who I Am
   I’m Estelle Carey, a qualified hypnotherapist offering therapy sessions online and in-person. I take your privacy seriously and follow UK data protection laws, including GDPR. (Data Protection Registration: ZB956746)
   
2. What Information I Collect
   Depending on how we work together, I may collect:
   1. Your name, email, phone number
   2. Your date of birth and GP details (where appropriate)
   3. Information about your health, lifestyle, emotions, and goals
   4. Notes from our sessions
      
3. How and When I Collect It
   1. I may receive your information when:
   2. You fill in a contact or booking form
   3. You send a message via email or social media
   4. You take part in a free consultation or therapy session
   5. You complete an intake or consent form
      
4. What I Use Your Information For
   Your data helps me:
   1. Contact you to arrange sessions
   2. Understand how I can support you
   3. Keep appropriate records of our work together
   4. Comply with legal or insurance requirements
      
5. Legal Grounds for Processing
   I process your personal data only when:
   1. You give clear consent (e.g. tick a box or sign a form)
   2. We enter into a contract (e.g. you book therapy sessions)
   3. I have a legal obligation (e.g. to keep records for HMRC or insurance)
      
6. How Your Data Is Stored
   Your information is kept secure:
   1. In password-protected secure systems with 2-step verification wherever possible.
   2. Paper notes (if any) are stored in a locked cabinet.
      
7. Who I Share Your Data With
   I do not sell or share your information with third parties for marketing.
   I may share limited info only if required:
   1. With your consent
   2. If I’m legally required (e.g. serious risk of harm)
   3. With professional insurers, if needed for a claim
      
8. How Long I Keep Your Data
   1. Client records are kept for 7 years after your final session (as recommended by insurers)
   2. Messages or enquiries not leading to therapy are deleted within 3 months
      
9. Your Rights
   You have the right to:
   1. See what data I hold about you
   2. Ask for corrections or updates
   3. Ask me to delete your information (unless I must keep it for legal reasons)
   4. Withdraw consent at any time
      
10. Cookies and Website Tools
    This website may use cookies (e.g. Google Analytics) to understand how visitors use the site. You can accept or decline these when you visit.
    
11. Contact Details
    If you have any questions or want to exercise your rights, contact:

• Email: gdpr@karunahypnotherapy.com
• Website: https://karunahypnotherapy.com

You can also contact the Information Commissioner’s Office (ICO) if you’re unhappy with how your data is handled:

https://ico.org.uk