Privacy Policy
At Mindscapes Wellness, your privacy is important. This Privacy Policy explains how we collect, use, and protect your personal data when you use our hypnotherapy services or contact us through our website.
We are committed to handling your information securely and in line with the Data Protection Act 2018 and the UK General Data Protection Regulation (GDPR).
Mindscapes Wellness provides professional hypnotherapy services and is responsible for your personal data.
Data Controller:
Sonal Francis
Mindscapes Wellness
ICO Registration Number: ZC075912
When you contact or work with Mindscapes Wellness, we may collect:
- Your name and contact details (email, phone number, address)
- Health and wellbeing information relevant to your therapy
- Appointment history and session notes
- Messages sent via email, website forms, or social media
We only collect the information necessary to provide safe and effective hypnotherapy.
We use your information to:
- Provide hypnotherapy sessions tailored to your needs
- Schedule and manage appointments
- Communicate with you about your sessions
- Maintain accurate clinical records
- Meet legal, insurance, and professional requirements
We never sell your data or use it for unrelated marketing.
Under GDPR, we rely on the following lawful bases:
- Consent – when you contact us or agree to therapy
- Legitimate Interests – to deliver safe, effective treatment
- Legal Obligations – for record-keeping and insurance purposes
You have full control over your personal data. You can:
- Request access to the data we hold about you
- Ask us to correct inaccurate information
- Withdraw your consent at any time
- Request that we limit how your data is used
- Ask for your data to be transferred elsewhere
- Request deletion of your data (where legally possible)
We aim to respond to all requests within 30 days.
We take data security seriously. Your information is protected through:
- Locked storage for paper records
- Password-protected devices for digital files
- Secure communication systems
- Storage within the European Economic Area (EEA)
We only keep your data for as long as necessary:
- Adult client records: minimum of 7 years after therapy ends
- Children’s records: retained according to professional guidelines
After this period, all records are securely destroyed.
Your information is kept confidential and will only be shared:
- With your explicit consent
- If required by law
- If there is a serious risk of harm to you or others
We may use trusted third-party services (such as booking or payment systems). These providers only access the minimum data required and comply with GDPR.
All supervision discussions are anonymised, so you cannot be identified.
Everything you share during your hypnotherapy sessions is confidential, except in rare situations where disclosure is required by law or necessary to prevent serious harm.
If a data breach occurs that could affect your rights or freedoms, we will:
- Notify the Information Commissioner’s Office (ICO)
- Inform you within 72 hours, where required
You can request:
- A copy of your personal data
- Deletion of your data (subject to legal requirements)
For any questions about this Privacy Policy or your data:
Sonal Francis – Hypnotherapist
Mindscapes Wellness
Email: sonal@mindscapes-wellness.com
Address: 15 Bennett Way, Sawston, Cambridgeshire CB22 3FR
