Privacy Policy

Last updated: 26 September 2026

KP Hypnotherapy respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what information I collect, how and why I use it, how I keep it secure, and your rights in relation to your personal information.

This policy applies to information collected through my website, enquiries, consultations, bookings and hypnotherapy services.

KP Hypnotherapy is operated by Karen Perfett, a self-employed hypnotherapist based in Torquay, Devon.

For data protection purposes, I am the data controller responsible for your personal information.

Contact:
Email: karen.perfett@hotmail.co.uk
Address: 72 Lyme view rd, Torquay, TQ1 3TS

If you have any questions about how your information is handled, please contact me using the details above.

Depending on how you interact with me, I may collect some or all of the following:

• Your name
• Email address
• Telephone number
• Address, where necessary
• Information about your preferred appointment date and time
• Details of your enquiries and communications with me
• Information relating to your hypnotherapy goals and the reason you are seeking support
• Relevant information about your health, wellbeing, lifestyle, habits or circumstances that you choose to share with me
• Notes relating to your consultations and sessions
• Payment and transaction information
• Information about your use of my website, including technical information such as IP address, browser type and device information
• Marketing preferences, where you have chosen to receive marketing communications

I only collect information that is relevant and reasonably necessary for the purposes described in this Privacy Policy.

Some of the information you may choose to share with me may constitute special category data, particularly information concerning your physical or mental health.

For example, this could include information you provide about anxiety, emotional eating, weight management, medication, medical conditions or other health-related circumstances where relevant to your hypnotherapy.

I will only collect and use sensitive information where it is necessary and appropriate for providing my services and in accordance with UK data protection law.

Where I rely on explicit consent for processing special category information, I will ask you to provide that consent clearly and separately. Explicit consent can be withdrawn, although this does not affect processing that has already taken place.

I may use your personal information to:

• Respond to your enquiries
• Arrange and manage consultations and appointments
• Provide hypnotherapy services
• Understand your individual needs and goals
• Prepare for and conduct your sessions
• Create personalised hypnosis recordings where these form part of your programme
• Communicate with you about your appointments and programme
• Provide appropriate support during and after your programme
• Process payments
• Keep appropriate business and financial records
• Respond to questions, requests or complaints
• Improve my website and services
• Meet legal, regulatory and insurance requirements
• Send marketing communications where you have specifically chosen to receive them

I will not use your personal information for purposes that are incompatible with those explained to you.

Under UK data protection law, I need a lawful basis for collecting and using personal information.

Depending on the circumstances, I may rely on:

Contract or steps necessary before entering into a contract
For example, when processing information necessary to arrange and provide your hypnotherapy sessions.

Legitimate interests
For example, managing my business, maintaining appropriate records, responding to enquiries and improving my services, where this does not override your rights and interests.

Legal obligation
Where I need to retain or disclose information to comply with a legal requirement.

Consent
Where consent is the appropriate legal basis, such as certain marketing communications.

For special category health information, I will also identify an appropriate additional condition under UK GDPR where required. This may include explicit consent.

If you contact me through my website, email, telephone or another communication method, I may retain the information you provide so that I can respond to your enquiry and, where appropriate, arrange your consultation or appointment.

If you decide not to become a client, I will not retain your information indefinitely and will securely delete or dispose of it when it is no longer reasonably required, subject to any legal or insurance requirements.

I will only send you marketing emails where I have a lawful basis to do so.

If you choose to receive marketing communications, you can unsubscribe at any time by using the unsubscribe option in the email or by contacting me directly.

I will not sell your personal information to third parties.

I treat your personal information as confidential.

I may need to share limited information with trusted service providers who help me operate my business, such as:

• Website hosting or website management providers
• Appointment or booking software providers
• Email providers
• Payment providers or banks
• IT, security or cloud-storage providers
• Professional advisers, such as accountants or insurers, where necessary
• Government bodies, regulators or law-enforcement authorities where I am legally required to do so

Where another organisation processes personal information on my behalf, I will take appropriate steps to ensure that your information is handled securely and in accordance with applicable data protection requirements.

I will not sell or rent your personal information to third parties.

Information you share with me during hypnotherapy is treated as confidential.

There may be circumstances where I am legally required to disclose information, or where disclosure is necessary to protect someone's vital interests or comply with a legal obligation.

Where appropriate, I will discuss any proposed disclosure with you first.

I take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, alteration or disclosure.

These measures may include secure passwords, access controls, appropriate security software and secure storage.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

I will only keep personal information for as long as it is reasonably necessary for the purpose for which it was collected, including any legal, accounting, insurance or professional requirements.

Different types of information may therefore be retained for different periods.

When information is no longer required, I will securely delete it or dispose of it appropriately.

Under UK data protection law, you have rights in relation to your personal information. Depending on the circumstances, these may include the right to:

• Ask for access to the personal information I hold about you
• Ask for inaccurate or incomplete information to be corrected
• Ask for your information to be erased in certain circumstances
• Ask for processing of your information to be restricted in certain circumstances
• Object to certain types of processing
• Request your information in a portable format where the right applies
• Withdraw consent where I am relying on consent as the lawful basis for processing

These rights are subject to certain legal conditions and exemptions.

If you wish to exercise any of these rights, please contact me using the details at the beginning of this Privacy Policy.

My website may use cookies and similar technologies.

Some cookies are necessary for the website to function correctly. Other cookies, such as analytics or advertising cookies, may collect information about how visitors use the website.

Where required by law, I will ask for your consent before placing non-essential cookies on your device.

You can also control cookies through your browser settings.

If I use specific analytics, advertising or other third-party services on the website, I will provide appropriate information about them.

My website may contain links to other websites, such as social media platforms, booking services or other resources.

Once you leave my website, I am not responsible for the privacy practices or content of those third-party websites. I recommend checking their privacy policies before providing them with personal information.

If you choose to have hypnotherapy online via Zoom or another video-conferencing service, that service may process certain personal information in accordance with its own privacy policy and terms.

You should review the privacy information provided by the relevant service.

My services are primarily intended for adults.

I do not knowingly collect personal information from children through my website without appropriate consent or involvement from a parent or guardian where required.

I may update this Privacy Policy from time to time to reflect changes to my services, website, technology or data protection requirements.

The latest version will always be published on this page, with the date of the most recent update shown at the top.

If you have concerns about how I have handled your personal information, please contact me first so that I can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

You can find information about making a complaint on the ICO website.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

ICO website: https://ico.org.uk/

KP Hypnotherapy
Karen Perfett
Torquay, Devon
Email:karen.perfett@hotmail.co.uk

Privacy Policy last updated: 26 September 2026