1. Who I Am
Ardor Healing & Hypnotherapy provides solution-focused hypnotherapy and wellbeing services. I am the data controller responsible for your personal information.

2. What Information I Collect
I may collect the following personal data:

• Name
• Contact details (home address, email, phone number)
• Relevant health and wellbeing information
• Session notes (where appropriate)

3. Lawful Basis for Processing
I process your personal data under the lawful basis of Legitimate Interests, as it is necessary for me to provide safe and effective therapy services.

This means:

• Purpose: To deliver therapy and support your wellbeing
• Necessity: I only collect information that is required for your care
• Balance: I ensure your privacy is respected and data collection is minimal

In certain situations, I may share information under Recognised Legitimate Interests (as defined under the Data Use and Access Act 2025), such as where required for safeguarding or public safety. In these cases, the requesting organisation is responsible for determining necessity.

4. How I Use Your Information
Your data is used to:

• Contact you about appointments
• Provide therapy services
• Maintain confidential records
• Meet legal and professional obligations

5. How Your Data is Stored
Your data is stored securely and confidentially. I take appropriate steps to protect your information from unauthorised access.

6. How Long I Keep Your Data
I retain client records in line with professional guidelines (typically up to 7 years).

7. Your Rights
You have the right to:

• Request access to your data (Subject Access Request)
• Request correction or deletion
• Restrict or object to processing

Subject Access Requests will be handled using reasonable and proportionate searches, in line with current legislation.

8. Sharing Your Information
Your information will remain confidential unless:

• There is a risk of harm to yourself or others
• Disclosure is required by law
• A recognised legitimate interest applies (e.g. police request)

9. Contact Details
If you have any questions about your data, please contact:
sophiebenn@ardorhh.co.uk

10. Complaints
If you have concerns about how your data is used, please see my Data Protection Complaints Procedure below.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).