This is my privacy policy for the Practitioner and Foundation level courses.
I collect personal information from you as part of my enrolment process. Two sets of rules govern my handling of this information. These are the General Data Protection Regulations (GDPR) and my professional body’s code of ethics. This page explains how these affect the way I work.
My company, Yorkshire Therapies & Training Ltd, is registered with the ICO Information Commissioner’s Office.
I am both the Data Controller and the Data Protection Officer. My contact details are Debbie Waller, email debbie@yorkshirehypnotherapytraining.co.uk, phone 01977 678593.
You have no legal requirement to share information with me. However, if you choose not to do so, I may not be able to answer your queries, send you items you have purchased, or offer you a place on a course.
What Information I Collect and Why
The information I collect about you comes directly from you. Contact forms, order forms, and newsletter sign-ups collect your name and contact details. The purpose of this is:
- to answer your enquiries
- to provide you with the free ebooks offered on the site
- to send you my monthly newsletter
- to provide you with items you have purchased
Hypnotherapy training enrolment forms collect your name and contact details; your learning and payment preferences; your medical history; and details of any criminal convictions. The purpose of this is:
- to decide if I can offer you a place on a course
- to administer the course once you are enrolled
- to provide ongoing support and supervision
- to enable invoicing, payment processing, and accurate record-keeping
Confidentiality
Confidentiality is an important part of both professional practice and the learning environment at Yorkshire Hypnotherapy Training.
Confidentiality of Student Information
All personal information you provide is treated as confidential and handled in accordance with GDPR and relevant professional ethical standards.
I maintain the same level of confidentiality for students as I do for therapy clients. Your personal information will not be shared unless:
- it is necessary for course administration (as outlined in this policy),
- you have given your consent, or
- there is a legal or ethical obligation to do so
Examples of situations where confidentiality may need to be breached include:
- where there is a legal requirement (such as a court order),
- where safeguarding legislation applies, or
- where there is good reason to believe that failure to disclose information could result in serious harm to yourself or others
Any disclosure will be limited to what is necessary and handled appropriately.
Confidentiality Within the Learning Environment
During training, students may share personal experiences or discuss client work. This is a valuable part of the learning process and relies on mutual trust.
All students are expected to:
- treat any personal information shared by others as confidential
- not disclose or repeat information outside the training environment
- avoid identifying individuals when discussing case material wherever possible
This applies to both in-person and online settings, including informal discussions and social media.
Confidentiality in Practice Work
As part of your training, you will practise your skills with volunteers or clients. You are expected to maintain appropriate standards of confidentiality in line with professional practice.
This includes:
- keeping information shared by practice clients confidential
- storing notes and records securely
- anonymising client information when discussing cases in training, supervision, or assessments
- explaining the limits of confidentiality to those you work with
Confidentiality is not absolute and may need to be broken where:
- there is a risk of serious harm to the individual or others
- safeguarding concerns arise
- there is a legal obligation to disclose information
Where possible, this should be managed in line with professional guidance and discussed with a supervisor or tutor.
Boundaries of the Training Role
Yorkshire Hypnotherapy Training is a training provider rather than a therapeutic service.
While tutors will treat student information with respect and discretion:
- tutors do not provide personal therapy within the training context
- sensitive personal issues may be better supported in a separate therapeutic setting
- tutors may signpost to appropriate external support where necessary
Third Party Services
My online forms are powered by Jotform and your form submissions are processed through their servers. Your messages are encrypted before being sent to me.
My newsletter is administered via EmailOctopus. If you agree to receive it, your name and email address are stored on their servers.
My online calendar is powered by Zcal, which collects and stores your name and contact details when you book an appointment.
Online payments are made via Stripe.
If you contact me via social media, your messages will be stored on those platforms.
Each of these providers has its own privacy policy, which you can review via their respective websites.
Lawful Basis for Processing
The lawful basis for collecting and processing your data is consent, contract, or legitimate interests.
- Clicking a payment button creates a contract to supply goods or services
- You will be required to sign a contract if you attend a Foundation or Practitioner course
- If you contact me with an enquiry, it is a legitimate interest of my business to respond
- Graduation photographs may be used for promotional purposes as a legitimate interest, though you can opt out
Data Retention
I keep the information you provide for seven years after your graduation. This aligns with guidance from my professional body and insurance provider.
Sharing Your Information
If you enrol on a Practitioner or Foundation course, your name and contact details may be shared with:
- accrediting professional bodies (where student membership is provided)
- guest, temporary, or stand-in tutors
- third parties involved in funding or supporting your training
I maintain strict confidentiality and only share information where necessary.
Information may also be shared:
- where required by law
- where safeguarding concerns apply
- where there is a risk of serious harm
If I am temporarily or permanently unable to act (e.g. through illness or death), my therapeutic executor (David Waller) will have access to your contact details.
Your Rights
You have rights over the information I hold about you, including:
- Portability – you can request your data be transferred
- Rectification – you can ask for corrections
- Erasure – in some cases, you can request deletion of your data
- Right of access – you can request a copy of your data at any time
- Restriction – you can ask for processing to be limited
- Objection – you can object to certain uses, such as marketing
- Information – you have the right to understand how your data is used
Requests will be responded to within 30 days and free of charge.
You can learn more about your rights via the Information Commissioner’s Office.
Withdrawing Consent
You may withdraw your consent for me to use your information at any time. If you are a current student, this may mean that you are unable to continue on the course.
Complaints
If you have concerns about how your data is handled, you have the right to complain to the Information Commissioner’s Office.
Further Information
Further information about privacy is available in our cookie policy.
Updated April 2026 to clarify details about student confidentiality
Updated October 2025 to reflect the change of newsletter provider from Mailchimp to Email-Octopus
Updated November 2023 to clarify the use of third-party services and add Z-Cal.
Updated August 2022 to remove references to NHS Test and Trace/COVID