Privacy Policy

I take your privacy seriously.

This policy explains what personal information I collect, why, who I share it with, how long I keep it and what rights you have.

Who I am and how I process your personal data

I, Ewelina Pietrowicz, trading as Soft Space Hypnotherapy, am committed to protecting your privacy and handling your personal information responsibly.

I comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 by ensuring that personal data is:

processed lawfully, fairly and transparently;
kept accurate and up to date;
collected only where necessary;
stored securely and confidentially;
protected against unauthorised access, loss or misuse;
retained only for as long as necessary.

Personal data may include information you provide before or during therapy, including your name, contact details, medical history, details about the issue you are seeking support for, assessment forms, treatment plans and my clinical notes.

How your information is used

Your personal information is used to:

provide hypnotherapy services;
communicate with you regarding appointments and therapy;
maintain accurate clinical records;
ensure safe and appropriate therapeutic care;
comply with professional and legal obligations.

I may also occasionally contact you regarding your appointments or to request feedback about the service you have received.

Confidentiality

Everything discussed during therapy is treated as confidential.

Information will not be shared with any third party without your consent unless there is a legal or ethical obligation to do so, for example:

where there is a serious risk of harm to yourself or another person;
where safeguarding concerns arise involving a child or vulnerable adult;
where disclosure is required by law or court order.

Professional Supervision

As part of good clinical practice and professional development, I regularly attend clinical supervision.

Client cases may be discussed with my supervisor; however, all identifying information is removed, ensuring that you cannot be identified.

Online Sessions

Online sessions are conducted using secure video conferencing software. While every effort is made to ensure confidentiality, clients are encouraged to participate from a private location where they feel comfortable speaking openly.

How long your data is kept

Your records will be retained in accordance with professional requirements and applicable legislation.

Once the retention period has expired, your records will be securely destroyed.

Lawful basis for processing

The lawful bases for processing your personal data are:

Article 6(1)(b) – processing is necessary for the performance of our therapeutic agreement;
Article 6(1)(f) – legitimate interests in providing safe and effective therapy;
Article 9(2)(h) – processing of special category health data for the provision of health-related care.

Your rights

Under UK GDPR you have the right to:

request access to the personal data I hold about you;
request correction of inaccurate or incomplete information;
request erasure of your data where applicable;
request restriction of processing;
object to processing where appropriate;
request transfer of your data where applicable;
withdraw consent where consent is the lawful basis for processing;
lodge a complaint with the Information Commissioner's Office (ICO).

Complaints

If you have any concerns about how your personal information is handled, please contact me in the first instance.