This is my privacy policy for the Practitioner and Foundation level courses.

I collect personal information from you as part of my enrolment process. Two sets of rules govern my handling of this information. These are the General Data Protection Regulations (GDPR) and my professional body’s code of ethics. This page will explain how these affect the way I work.

  • My company, Yorkshire Therapies & Training Ltd, is registered with the ICO
  • I am both the Data Controller and the Data Protection Officer. My contact details are Debbie Waller, email, phone 01977 678593.
  • You have no legal requirement to share information with me. However, if you do not I will not be able to answer your queries, send you items you have purchased or offer you a place on a course.
  • The information about you that I collect comes from you.
  • Contact forms, order forms, and newsletter sign-ups collect your name and contact details. The purpose of this is:
    • to answer your enquiries,
    • to provide you with the free ebooks offered on the site,
    • to send you my monthly newsletter,
    • to provide you with items you have purchased.
  • Hypnotherapy training enrolment forms collect your name and contact details; your learning and payment preferences; your medical history; and details of any criminal convictions. The purpose of this is:
    • to decide if I can offer you a place in one of my classes,
    • to administer a course once you are enrolled,
    • to provide ongoing support and supervision,
    • to enable me to invoice you and receive payment, and to keep proper records and accounts.
  • Third party services:
    • My online forms are powered by Jotform and your form submissions are processed through their servers. Your messages are encrypted before being sent to me. Read their privacy policy HERE
    • My newsletter is administered via MailChimp, your information is stored on their servers – read their privacy policy HERE.
    • My online calendar is powered by ZCal and they collect and store your name and contact details when you book an appointment. Read their privacy information HERE.
    • Online purchases are made via PayPal. Their privacy policy is HERE.
    • If you contact me on social media your messages will be stored on their servers.
  • The lawful basis of my collecting and processing data is consent or contract or legitimate interests.
    • Clicking a PayPal button creates a contract to supply goods or services which I cannot do without using your data.
    • You will be required to sign a contract if you attend the course.
    • We use graduation photos for promotional purposes on social media and our website. This is a legitimate interest of my business but you can opt out of appearing in them.
    • If you email, phone or contact me via social media with enquiries, it is a legitimate interest of my business to use your contact details to reply to you.
  • I keep the information you give me for seven years after your graduation. My professional body and insurance company suggest this length of time for client records. They don’t have separate advice for trainers.
  • Sharing your information.
    • If you enrol on a Practitioner or Foundation level course, as part of the course administration I will share your name and contact details with any accrediting professional body that grants a free student membership, and with any guest, temporary, stand-in or ‘supply’ teacher.
      • Information will be shared with any third party (e.g. an employer or someone offering training grants) who is involved in your application.
      • I maintain the same level of confidentiality for students as I do for clients, and only divulge personal data where there is a legal requirement for me to do so. I will share information with the appropriate authorities if the Children’s Act applies, or if a court order is issued, or if there is good cause to believe that failure to disclose information will expose you or others to a serious risk of harm.
    • If I am temporarily or permanently rendered incapable of acting (e.g., by ill health or death) my therapeutic executor (David Waller) will be given access to your contact details.
  • You have rights over the information I hold about you. These are:
    • Portability – you can ask me to send your information to someone else.
    • Rectification – if you think my records are wrong you can ask me to change them.
    • Erasure – in some circumstances you can ask me to remove your details from my records (this is sometimes called ‘the right to be forgotten’). 
    • Fair profiling – you can ask that any processes I automate are done by a person instead of a computer. I don’t currently automate any information processing, although I do use online forms to collect information.
    • Right of access – you can have a copy of the information I hold at any time, by requesting it in writing. If you do this it will be provided within 30 days and free of charge.
    • Restricting processing – in some circumstances you can request that I stop processing your information.
    • Objection – you can object to the way I process information (e.g. if it is used to send you direct marketing and you don’t want to receive this). You can ask me to stop using it in the way
    • Information – you have the right to understand how I collect and process your information (hence this privacy notice).
  • You can learn more about these rights at
  • You can withdraw your permission for me to use your information at any time. This would mean leaving the course if you are still a student.
  • You have a right to complain to the ICO if you have any problem with the way I store or use your data, or if you do not think your rights are being respected.

Further information about privacy is on our cookie policy page.

Updated November 2023 to clarify the use of third party services and add ZCal.
Updated August 2022 to remove references to NHS test and trace/COVID