GDPR and Privacy Statement
Blueberry Hypnotherapy is the trading name for my hypnotherapy practice. My name is Rachael Marcks, and I am a fully qualified Solution Focused Clinical Hypnotherapist, registered with the Association for Professional Hypnosis and Psychotherapy (APHP) and the National Register of Psychotherapists and Counsellors (NRPC). I am also a practising Registered General Nurse and Independent Prescriber, registered with the Nursing and Midwifery Council (NMC) since 1992. I respect your privacy, and I am committed to protecting any personal information that you provide me.
This privacy policy explains how and why I collect any personal information. This may be during the sessions you attend, via text or email and via the contact page form on this website. This privacy policy also explains how I use this information, who I share it with, your rights regarding personal information that I hold, as well as detailing other issues.
I am registered with the ICO number: ZC091320 and follow UK GDPR.
What information do I collect?
I collect information when you complete the contact page form on this website, when you email me directly and when you text message me. I also collect information during the hypnotherapy sessions you attend.
How will your data be stored?
With the implementation of the General Data Protection Regulations act 2018 (GDPR) and the Data Use and Access Act 2025 (DUAA) the focus is on ensuring the secure and private storage of personal, confidential and sometimes sensitive data.
How long will you hold my data for?
The duration of data retention varies, based on the organisations you are registered with. As a member of the APHP, I am obliged to comply with the requirement of my insurance provider, Holistic Insurance Services, that client consultation records are taken and retained for a period of five years.
What if I would like my data to be destroyed before this date?
Under GDPR rules you have the right to request the deletion of any of your records at any time.
Can I see or get a copy of the information you hold?
In accordance with GDPR you have the right to access and obtain a copy of your information within 30 days.
What are your reasons for collecting this information?
I collect information during the initial consultation and hypnotherapy sessions, and sometimes when you text or email me directly, if it is relevant to the therapy you are receiving.
Why do we need a record of this information?
To provide you with the highest quality support, I collect information about what you want to achieve during the sessions, a limited amount of relevant medical information, some family details and brief session notes. This information allows me to refer to the content and discussions of previous sessions. Your contact details/address and GP details will only be used with your explicit consent.
How do I know that you will store my information securely?
I employ robust measures to ensure your data remains private:
Any paper/handwritten session notes are stored in a locked filing cabinet.
Any electronic documents and emails are encrypted and stored on a facial recognition and password protected computer that I have sole access to.
Text messages are encrypted, finger-print recognition and password protected.
Are our discussions within the hypnotherapy sessions confidential?
Your data is strictly confidential. It is never sold or shared for marketing purposes. It is only shared under the following conditions:
- Supervision: I may discuss your case with a professional supervisor. In these instances, all data is fully anonymised.
- Legal/Safety Obligations: If I believe there is a risk of serious harm to yourself or others, or if I am legally compelled by a court of law.
- Integrated Digital Services: Using verified, secure platforms for appointment booking or telehealth as permitted under DUAA 2025 standards.
Everything we discuss during the sessions remains strictly confidential between us both. On occasion I may choose to discuss elements of the sessions with my supervisor, during clinical supervision discussions, to ensure I am doing my job effectively. During these discussions I will not disclose any identifying details about you to my supervisor. My supervisor is an experienced clinical hypnotherapist, registered with the National Council for Hypnotherapists, who also adheres to GDPR.
I am obliged by GDPR to protect your confidentiality. For this reason, if we meet in circumstances away from the hypnotherapy sessions, although I will acknowledge you, it would be appropriate to avoid conversation. However, if you wish to discuss your therapy with other people you are welcome to do so.
If you are an existing patient of my private medical aesthetics practice, it would be appropriate to avoid conversation regarding your hypnotherapy sessions and to save any in-depth discussion for during your hypnotherapy sessions.
At all times I will maintain strict confidentiality and only share information about you with other health or social care professionals with your explicit signed consent, in circumstances where I feel it is in your best interest for me to disclose relevant information to your GP, medical consultant or physician e.g., to notify them that you are receiving treatment and when the treatment ends. The only exceptions would be if I believed you were about to harm yourself or others – in this circumstance I would be required to inform the relevant authorities as part of my duty of care. However, I would make every effort to discuss this with you before taking any action. I would be legally obliged to provide information to the police as set out in a warrant or court order, should the situation arise.
Complaints Process
If you have concerns about how I handle your data, please contact me directly so we can resolve the matter.
Email: rachael@blueberryhypnotherapy.co.uk
In writing: Rachael Marcks, 31 Chailey Gardens, Blewbury OX11 9FL
In line with the 2025 DUAA amendments, which aim to streamline the complaints process, you have the right to lodge a formal complaint with the Information Commissioner’s Office (ICO) if you remain unsatisfied. ICO Website: https://ico.org.uk
If you are unhappy with any aspect of our work together, please feel free to raise it with me in the first instance. If we cannot resolve it, you may contact the Association for Professional Hypnosis and Psychotherapy (APHP) via their website: www.aphp.co.uk.