Privacy Policy

Privacy Policy

Effective Date: 22 October 2026  

Practice Name: Granting Progress  

Data Controller: Grant Wyeth  

Contact: hello@grantingprogress.com 

At Granting Progress, your privacy, confidentiality, and data security are fundamental. This Privacy Policy outlines how your personal information is collected, stored, used, and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

---

1. The Data I Collect

To provide safe, effective clinical hypnotherapy, I collect and process both personal and sensitive information:

Basic Personal Data: Your name, email address, telephone number, and emergency contact details.

Special Category (Health) Data: Information provided in your digital intake questionnaire and clinical sessions, including health history, current stressors, lifestyle habits, session notes, and outcome tracking metrics.

Technical Data: Basic analytics collected automatically if you interact with this website (e.g., standard cookies, browser type).

---

2. Lawful Basis for Processing

Under the UK GDPR, I process your data under the following lawful bases:

Contractual Necessity & Consent (Article 6): Processing basic personal details necessary to communicate, schedule appointments, and deliver clinical services.

Explicit Consent for Special Category Health Data (Article 9(2)(a)): Processing health and therapeutic information based on your explicit, informed consent provided prior to our initial consultation.

---

3. How Your Information Is Used

Your data is used strictly for:

* Providing structured cognitive-behavioural hypnotherapy and tailored practice exercises.

* Managing session appointments, reminders, and professional correspondence.

* Maintaining professional clinical records in accordance with UK complementary healthcare standards.

---

4. Supervision, Training & Anonymised Case Studies

As part of completing professional qualification requirements for the Hypnotherapy in Practice Diploma (HPD) with the Anglo European College of Therapeutic Hypnosis, clinical work is conducted under formal supervision:

Clinical Supervision: Work may be reviewed with an accredited supervisor to ensure the highest standard of client care. Supervision is conducted under strict clinical confidentiality.

Portfolio Submission: Clinical case studies may be submitted for qualification assessment. All portfolio submissions are thoroughly anonymised. Every identifying detail—including your name, location, occupation, and personal identifiers—is entirely removed or altered to ensure your identity remains completely protected.

---

5. Storage and Security

I take rigorous technical and organisational measures to keep your data secure:

* All electronic records, intake forms, and case notes are stored on encrypted, password-protected systems with multi-factor authentication.

* Email and video consultations are conducted using secure, encrypted industry-standard platforms.

* Your data is never sold, leased, or shared with third parties for commercial or marketing purposes.

---

6. Data Retention

In line with UK clinical indemnity and professional standards, adult client records are securely retained for 7 years following the conclusion of therapy, after which all digital records and notes are permanently deleted.

---

7. Limits of Confidentiality

Everything discussed within sessions remains strictly confidential. The only exceptions occur under statutory legal duty or professional safeguarding obligations:

1. Where there is a serious risk of imminent harm to yourself or others.

2. Where required by law, such as a court order or child/vulnerable adult protection disclosure.

Whenever ethically and legally possible, any required disclosure would be discussed with you first.

---

8. Your Legal Rights

Under UK data protection law, you have specific rights regarding your personal information, including:

Right of Access: You may submit a Subject Access Request to receive a copy of the personal data held about you.

Right to Rectification: You may request corrections to any inaccurate or incomplete records.

Right to Withdraw Consent: You can withdraw consent for data processing at any time (subject to statutory clinical record-keeping requirements).

If you have questions or wish to exercise these rights, please email hello@grantingprogress.com. If you are unsatisfied with how your data is handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at [ico.org.uk](https://ico.org.uk).