Cosy therapy room sofa with soft blanket - clinical hypnotherapy Worthing

Privacy Policy

Privacy Policy

‍

1. Who we are

This website is operated by Gabi Metiu, trading as Gabi Metiu Hypnotherapy, located in Worthing, West Sussex, UK.

For the purposes of UK data protection law, Gabi Metiu is the Data Controller for personal data collected through this website.

Contact: gabimetiu@googlemail.com | Website: gabimetiu.com

2. What data we collect

When you use the contact form on this website, we collect:

  • Your name
  • Your email address
  • Your phone number (optional)
  • The content of your message

If you visit the website, we may also collect standard technical data such as your IP address, browser type, pages visited and time spent on the site, via cookies and analytics tools (see Cookie Policy).

3. Why we collect your data and the lawful basis

We collect and use your personal data for the following purposes:

  • To respond to your enquiry - lawful basis: legitimate interests
  • To arrange and manage therapy appointments - lawful basis: contract / legitimate interests
  • To comply with legal obligations - lawful basis: legal obligation
  • To analyse website performance and improve the user experience - lawful basis: legitimate interests (analytics cookies, where consented)

We will never use your personal data for marketing purposes without your explicit consent.

4. Special category data

As a therapy practice, we may handle information relating to your physical or mental health. This is classed as special category data under UK GDPR and is treated with the highest level of confidentiality. Such data is only processed where necessary for the provision of therapy services and with your explicit consent.

5. How long we keep your data

Enquiry data submitted via the contact form is retained for as long as necessary to respond to your enquiry and no longer than 2 years unless you become a client, in which case your records will be kept in accordance with professional therapeutic guidelines (typically 7 years from the end of treatment, or until age 25 for minors).

6. Who we share your data with

We do not sell or share your personal data with third parties for marketing purposes. We may share data with:

  • Service providers who assist in running this website (e.g. Webflow for hosting, CookieYes for cookie consent) - only to the extent necessary
  • Professional supervisors or regulatory bodies, where required by our professional code of ethics
  • Law enforcement or regulatory authorities, where required by law

7. Data security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss or disclosure. All enquiry data is transmitted over encrypted connections (HTTPS).

8. Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (right to erasure)
  • Object to or restrict processing of your data
  • Data portability - receive your data in a structured format
  • Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at gabimetiu@googlemail.com. We will respond within 30 days.

9. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk | Telephone: 0303 123 1113

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on this website with the date of last update shown at the top.