Privacy Policy

InspireMe Hypnotherapy

Last updated: June 2026

1. Who I am

InspireMe Hypnotherapy is operated by Caroline Bublik, a Cognitive Behavioural Hypnotherapist and Coach.

Data Controller

Caroline Bublik
InspireMe Hypnotherapy

Email: [email protected]

Website: https://www.inspiremehypnotherapy.co.uk

If you have any questions about this Privacy Policy or how your personal information is handled, please contact me using the details above.

2. The information I collect

Depending on how you interact with my business, I may collect:

Identity information

  • Name
  • Date of birth
  • Address
  • Email address
  • Telephone number

Health information

If you become a client, I may collect information relating to:

  • Your wellbeing
  • Mental health
  • Medical history
  • Medication
  • GP details (where relevant)
  • Assessment questionnaires (such as GAD-7 and PHQ-9)
  • Session notes

This information is classed as special category personal data under UK GDPR.

Website information

When you visit my website I may collect:

  • IP address
  • Browser type
  • Device information
  • Pages visited
  • Cookies (see Cookie Policy)

Marketing information

If you request a free resource or join my mailing list, I may collect:

  • Name
  • Email address
  • Marketing preferences

3. How I collect your information

Information may be collected when you:

  • Complete a contact form
  • Book a consultation
  • Become a client
  • Subscribe to my newsletter
  • Download a free resource
  • Purchase a programme
  • Contact me by email or social media
  • Visit my website

4. Why I use your information

I use your information to:

  • Respond to enquiries
  • Deliver therapy and coaching services
  • Arrange appointments
  • Keep clinical records
  • Send agreed resources
  • Process payments
  • Comply with legal obligations
  • Improve my website
  • Send marketing communications where you have consented

5. My lawful basis

Depending on the circumstances, I rely upon:

  • Consent
  • Performance of a contract
  • Legal obligation
  • Legitimate interests

Where special category health information is processed, I rely on your explicit consent and, where applicable, on the provision of health care or therapy services.

6. Marketing

I only send marketing emails if you have opted in.

You can unsubscribe at any time by:

  • clicking the unsubscribe link
  • emailing me

I use Brevo to manage email communications.

7. Payments

Payments may be processed through:

  • Stripe
  • Bank Transfer

I do not store your payment card details.

8. Third-party providers

I use carefully selected providers who process data securely on my behalf, including (where applicable):

  • Brevo (email marketing)
  • Stripe (payments)
  • Podia (digital products)
  • Google Workspace (email and document storage)
  • Google Calendar
  • WordPress
  • Divi
  • Website hosting provider
  • Google Analytics
  • Meta (Facebook & Instagram)
  • Zoom or Google Meet (online sessions)

These providers have their own privacy policies and may process data outside the UK where appropriate safeguards are in place.

9. Confidentiality

Everything discussed during therapy is treated confidentially.

However, confidentiality may be broken where:

  • There is a serious risk of harm to yourself or another person;
  • Safeguarding concerns arise;
  • Disclosure is required by law or a court order; or
  • You provide explicit consent for information to be shared (for example, with your GP or another healthcare professional).

Where possible, I will discuss this with you first.

10. How long do I keep information?

I retain information only as long as necessary.

Typical retention periods are:

InformationRetention
Enquiries12 months
Marketing recordsUntil unsubscribed
Client records7 years after therapy ends (or longer if legally required)
Financial records6 years plus the current tax year

11. Your rights

You have the right to:

  • access your information;
  • request correction of inaccurate information;
  • request erasure where appropriate;
  • restrict processing;
  • object to certain processing;
  • request data portability where applicable;
  • withdraw consent where processing relies on consent.

Some rights are subject to legal exceptions.

12. Subject Access Requests

You may request a copy of the personal information I hold about you.

I will respond in accordance with UK data protection legislation. In some circumstances, I may ask for clarification to help identify the information you require before processing your request.

13. Data Security

I take reasonable technical and organisational measures to protect your information, including:

  • Password-protected systems;
  • Encrypted devices where available;
  • Secure cloud storage;
  • Limited access to client records;
  • Regular software updates.

14. Data Protection Complaints

If you have concerns about how your personal information has been handled, please contact me in the first instance.

You can email:

[email protected]

I will:

  • acknowledge your complaint within 30 days;
  • investigate your concerns without undue delay;
  • explain the outcome of my investigation and any action taken.

If you remain dissatisfied, you may complain to:

Information Commissioner’s Office (ICO)

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Website: https://ico.org.uk

15. Changes to this policy

This Privacy Policy may be updated from time to time to reflect changes in legislation, technology or my services. The latest version will always be published on this website.

Cookie Policy

en_GBEnglish
en_GBEnglish