Privacy Policy

Einir Trimble Hypnotherapy & Mind Run Privacy Policy

Last Updated: August 2026

This policy sets out how Einir Trimble Hypnotherapy (trading as Einir Trimble Hypnotherapy and Mind Run) collects, uses, stores, and protects any personal information you provide when using our website, 1-to-1 hypnotherapy services, or Mind Run digital audio subscription.

We are committed to ensuring your privacy is protected in full accordance with the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

1. Data Controller Information

Einir Trimble is the Data Controller responsible for your personal data.

Trading Name: Einir Trimble Hypnotherapy / Mind Run
Website: www.ethypnotherapy.com
Contact Email: info@ethypnotherapy.com
ICO Registration Number: ZB536550

2. Information We Collect

We collect different types of information depending on how you interact with us:

Standard Personal Data: Name, email address, telephone number, billing address, and payment transaction details (collected via secure payment processors; we do not store full credit card details).
Special Category Data (Health & Medical Data): When participating in 1-to-1 hypnotherapy sessions, you may disclose sensitive health information, medical history, lifestyle details, pastimes, occupation, and psychological goals.
Technical & Analytics Data: IP address, browser type, and interaction data via cookies when navigating our website.

3. Lawful Basis for Processing Data

Under UK data protection law, we must have a lawful basis for processing your data:

Contractual Necessity (Article 6(1)(b)): To deliver 1-to-1 therapy sessions, manage your Mind Run audio subscription, and handle payments.
Explicit Consent (Article 9(2)(a)): For processing Special Category Data (health/lifestyle information) gathered during therapy consultations. You may withdraw this consent at any time, though doing so may prevent us from continuing 1-to-1 therapy.
Legal Obligation (Article 6(1)(c)): To comply with UK tax, accounting, and insurance requirements.
Legitimate Interests (Article 6(1)(f)): To run our business efficiently, maintain site security, and respond to general inquiries.

4. How We Store and Protect Your Data

We take data security seriously and maintain strict physical, technical, and organizational measures:

Physical Records: Any handwritten session notes or physical client forms are kept strictly secure in a locked cabinet within a secure premises.
Digital Records: Electronic forms, emails, and client details are stored on password-protected, encrypted devices utilizing secure, UK GDPR-compliant cloud systems.

5. Data Retention

1-to-1 Hypnotherapy Records: In compliance with professional hypnotherapy standards, legal claims periods, and insurance requirements, client records and session notes are retained for 7 years following your last session. After 7 years, physical notes are securely shredded and digital files permanently deleted.
Mind Run Subscription Data: Retained for as long as your account is active, and for up to 6 years post-cancellation to comply with UK tax record requirements.

6. Confidentiality and Third-Party Sharing

We do not sell, rent, or trade your personal information. Your data is shared only with vetted processing platforms necessary to operate our services (e.g., website hosting, email management, payment processors, and audio distribution platforms).

Confidentiality Exceptions:

Information disclosed during therapy remains confidential except in rare circumstances where:

There is a legal obligation to disclose (e.g., court order or criminal investigation).
There is a serious, immediate risk of severe harm to yourself or others.
You explicitly request us to share information with your GP or healthcare team.

7. Cookies & Web Analytics

Our website uses small text files called cookies to analyze web traffic and improve site functionality. You can set your browser to reject cookies or manage your preferences via our on-site cookie banner. Rejecting non-essential cookies will not prevent you from using our site.

8. Your Legal Rights

Under the UK GDPR, you have the following rights:

Right to be informed: Transparency regarding how we use your data.
Right of access: The right to request a copy of the personal data we hold about you.
Right to rectification: The right to request correction of inaccurate data.
Right to erasure ("Right to be forgotten"): Request deletion of data where retention is no longer required by law or insurance.
Right to restrict or object to processing: Limit how we use your data or object to marketing.
Right to data portability: Obtain a copy of your digital data in a machine-readable format.

To exercise any of these rights, please contact us in writing at info@ethypnotherapy.com. We will acknowledge your request within 30 days.

9. Complaints & The ICO

If you have concerns about how your data is handled, please contact us directly first so we can resolve the issue. You also have the right to lodge a complaint with the UK data protection regulator:

Information Commissioner’s Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113