Privacy Policy

1. Introduction

Infinite Spark RTT ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

As a sole trader providing Rapid Transformational Therapy (RTT®), we act as the Data Controller for the personal information you provide to us.

2. Information We Collect

We may collect and process the following types of personal data:

• Contact Information: Name, address, email address, and phone number.

• Sensitive Personal Data (Special Category Data): Health information, medical history, emotional well- being, and other sensitive details shared during therapy sessions.

• Session Notes: Records of our therapy sessions and progress.

• Payment Information: Details required to process payments for our services.

• Website Usage Data: Information about how you use our website (if applicable).

3. How We Use Your Information

We use your personal data for the following purposes:

• To Provide Therapy Services: To deliver RTT sessions and tailor our approach to your specific needs.

• Communication: To schedule appointments, provide session materials, and respond to your inquiries.

• Legal and Regulatory Compliance: To meet our legal obligations and professional standards.

• Business Operations: For internal record-keeping, billing, and accounting.

• Marketing (with Consent): To send you information about our services or digital products, if you have

opted in to receive such communications.

4. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases for processing your data:

• Contractual Necessity: To fulfil our agreement to provide therapy services to you.

• Legitimate Interests: For the effective management and operation of our business.

• Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g.,

marketing).

• Special Category Data: We process health-related data based on your explicit consent and for the

purposes of providing healthcare or treatment.

5. Data Storage and Security

We take the security of your data seriously. Your personal information is stored securely using:

• Encrypted Digital Storage: Password-protected and encrypted devices and cloud services.

• Secure Physical Storage: Any paper records are kept in a locked filing cabinet.

• Data Retention: We will only retain your personal data for as long as necessary to fulfil the purposes we

collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Typically, therapy records are kept for 7 years after the conclusion of treatment.

6. Sharing Your Information

We do not sell or rent your personal data to third parties. We may share your information only in the following limited circumstances:

• Professional Supervision: As part of professional standards, cases may be discussed with a supervisor

(anonymously where possible).

• Legal Obligation: If required by law or to protect the safety of yourself or others.

• Service Providers: Trusted third parties who assist us in operating our business (e.g., payment

processors), provided they comply with strict data protection standards.

7. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.

• Right to Rectification: You can ask us to correct any inaccurate or incomplete information.

• Right to Erasure: You can request that we delete your personal data (subject to legal retention

requirements).

• Right to Restrict Processing: You can ask us to limit how we use your data.

• Right to Data Portability: You can request the transfer of your data to another service provider.

• Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.

8. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Infinite Spark Hypnotherapy
alex@infinitesparkhypnotherapy.com

9. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.