Privacy Policy

1. Who I am

Julie Horton Clinical Hypnotherapy is operated by Julie Horton, a sole practitioner and the data controller for the personal information described in this notice.

Website: https://juliehorton.com
Email: julie@juliehorton.com

My ICO registration number: ZC207784

2. What information I collect

I collect only the information I reasonably need to respond to enquiries, provide therapy, maintain appropriate professional records and run my practice. This may include:

your name, email address and other contact details you choose to provide;

appointment and payment information;

information you share about your physical or mental health, symptoms, medication, medical history, circumstances and therapeutic goals;

my handwritten or electronic assessment and session notes;

correspondence between us; and

signed agreements and consent records.

Assessment information may be collected through a secure online questionnaire and discussed further during our sessions. I also maintain my own assessment and session notes.

3. Why I use your information

I use personal information to:

respond to an enquiry and arrange appointments;

decide whether my service is suitable and provide agreed therapy;

maintain accurate, safe and ethical clinical records;

communicate with you about sessions;

process and record payments;

meet professional, insurance, safeguarding and legal responsibilities; and

manage or defend legal claims where necessary.

4. Lawful basis for using your information

For ordinary personal information, I generally rely on the need to take steps at your request before entering into an agreement, and to perform the agreement between us. I may also rely on legal obligations and my legitimate interests in running a safe, ethical and properly documented practice.

Information about physical and mental health is special category data. I process this information with your explicit consent so that I can assess your needs and provide the service you have requested. You may withdraw that consent, but this may mean that I can no longer provide therapy. Withdrawal does not affect processing that was lawful before consent was withdrawn.

In an emergency, I may process or share relevant information where this is necessary to protect your vital interests or those of another person, or where disclosure is required by law.

5. Confidentiality and when information may be shared

Information shared in therapy is treated as confidential. I do not sell client information or share it for marketing.

I may discuss relevant aspects of client work in professional supervision. Information is anonymised as far as reasonably possible, and my supervisor is professionally bound by confidentiality.

I may share information with a GP or another healthcare professional where you have given permission. Without your permission, I would only disclose relevant information where I believe there is a serious risk of harm to you or another person, where safeguarding action is required, or where I am legally required to do so. Where possible and appropriate, I would discuss this with you first.

6. How information is stored and protected

Paper records are kept in a locked case. Electronic records are stored on a password-protected MacBook and may be backed up using iCloud. Google Drive may occasionally be used. I take reasonable steps to restrict access and protect information from loss, misuse or unauthorised disclosure.

Online sessions take place through Zoom and are not recorded. Appointments may initially be booked through Calendly. My website and business email are hosted by GoDaddy. Payments are made by bank transfer, and the bank will hold its own transaction record.

These service providers process information under their own privacy terms. Some may process or support information from outside the UK. Where this occurs, I rely on the safeguards provided by the relevant service provider and applicable data-protection law.

HypnoVox may be used to send general therapeutic audio recordings. I do not include personal or clinical information in those recordings.

Online assessment and agreement forms may be completed through Tally.

7. How long I keep information

Clinical notes, signed agreements and related client records are normally retained for seven years after our work ends, in line with my professional and insurance requirements, and are then securely destroyed or deleted unless a longer period is legally necessary.

If you make an enquiry but do not become a client, I normally delete the enquiry and related correspondence within four weeks, unless there is a clear reason to retain it for longer.

Financial transaction records may be retained for the period required by tax and accounting law.

8. Website, cookies and booking

My website does not allow public comments, client accounts or file uploads, and it does not use a contact form. You may contact me by email or use the Calendly booking button to arrange a free introductory call.

The website uses cookies and may use basic website analytics provided through WordPress, hosting or related services. A cookie banner is provided so that choices can be made where required. Calendly and any external link you choose to open will process information under that provider’s own privacy notice.

Google Search Console is used to monitor how the website is indexed and performs in search. I am not currently using a mailing list or sending marketing newsletters.

9. Testimonials and case studies

I will only use a testimonial or case study with separate, specific permission. Where I rely on consent, you may withdraw that consent for future use by contacting me. Withdrawal may not be able to reverse material that has already been printed, distributed or lawfully published, but I will stop further use where reasonably possible.

10. Your data-protection rights

Depending on the circumstances, you may have the right to:

ask for a copy of the personal information I hold about you;

ask me to correct inaccurate or incomplete information;

ask me to erase information where the law permits;

ask me to restrict how information is used;

object to certain uses of your information;

receive information you provided in a portable format where applicable; and

withdraw consent where processing is based on consent.

These rights are not absolute. For example, I may need to retain some information to meet legal, professional or insurance obligations or to establish, exercise or defend legal claims.

To exercise a right or ask a question about your information, email julie@juliehorton.com. I may need to confirm your identity before releasing information.

11. Concerns and complaints

Please contact me first if you have any concern about how I use your information, so that I can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection. Information is available at https://ico.org.uk, or by telephone on 0303 123 1113.

12. Changes to this notice

I may update this notice when my services, systems or legal obligations change. The latest version will be published on my website with the date of the update.

Last updated: August 2026