Why I collect personal data

Personal data is information that identifies a person either directly or indirectly. For example, by name, location data, or other aspects of their identity. I collect this data in order to contact you and provide hypnotherapy services. I won’t ask for irrelevant information, and will keep any personal data secure. 

What is collected and how is it used?

The client intake form requests contact details, GP contact details and general health information, needed for correspondence and delivery of services. Also, I assess client suitability for hypnotherapy. Additionally, I keep session records and notes for returning clients and complaints.

I collect, store and use information as per GDPR guidelines. Therefore, I ensure information is accurate and retained for the appropriate time. Specific business-sector requirements govern that amount of time. Additionally, individual business needs can determine additional time requirements.

Legal basis and legitimate interests

My legitimate interests for obtaining this information are for correspondence, client assessment and service delivery. The special GDPR data category collected is health.


Your explicit consent and permission is required. Also, you can withdraw consent by emailing info@hypnosisandcbt.ie.

Third parties

Third parties have to keep your details secure, use them only for a specific purpose and dispose of them when no longer needed. Importantly, I will not give information to anyone without your consent, unless legally required.

WriteUpp is a practice management system for recording keeping and appointments. You can find more details here: https://www.writeupp.com/privacy-policy.pdf.

Stripe and Square are payment processing platforms. Card details, and cardholders names/addresses are processed by these third party organisations. You can find more details here:



Retention period

I store your personal data for 7 years after your last session. This is to ensure access to client records for returning clients and complaints.

Your rights 

You can request to see the data, correct it or have it erased. Also you can restrict processing or transfer it to another organisation. Additionally, you can object to marketing or automated processing. Importantly, you have the right to judicial review.


Contact the Data Protection Commission if you have a complaint about how your data or complaint is handled. You can contact them here: 21 Fitzwilliam Square South, Dublin 2, D02 RD28; 076 110 4800 / 057 868 4800. 

Requesting information

You can request to know: which organisations process/receive your data and why, relevant data categories, data storage times, and if you have to provide such information. Additionally, you have the right to correct, erase, restrict or object to processing, and withdraw consent or make a complaint.