Privacy Policy
This privacy notice explains how I collect, use, and protect your personal information when you contact me or work with me.
Who am I
I am Natasha Russo, a Cognitive Behavioural Hypnotherapist, trading as Natasha Russo Hypnotherapy. I work with adult clients (18+) and offer online hypnotherapy sessions.
I am registered with the Information Commissioner’s Office (ICO) as a data controller.
The information I collect
The information I collect depends on whether you are making an initial enquiry or working with me as a therapy client.
If you make an initial enquiry, I may collect your name, email address, optional telephone number, and the information you choose to include in your message. Please keep website contact-form messages brief and avoid including detailed medical, psychological or other sensitive personal information at this stage.
If you become a therapy client, I may collect further information that is relevant to working with you safely and professionally. This may include contact details, intake and consent information, therapy-related information you choose to share, notes relating to sessions, and information about appointments, payments or practical arrangements.
I only collect information that is relevant to the purpose for which it is provided and necessary for providing a professional service.
How I collect your information
I may collect information when:
- You contact me by email or through the website contact form
- You arrange or attend an initial consultation
- You complete intake, consent, assessment or feedback forms
- We work together during sessions
- You correspond with me about appointments, payments or therapy-related matters
Website contact form
When you submit the website contact form, the information you provide is sent to me by email through Resend, an email-delivery service. The website itself does not save contact-form submissions in a database, file, spreadsheet or content-management system.
Resend processes the information required to deliver the email, which may include your name, email address, optional telephone number, message content and relevant delivery information. Resend may retain email data for up to 30 days in accordance with its service arrangements and data-processing terms.
Enquiries sent through the contact form, and enquiries sent to me directly by email, are retained in my business email account for as long as reasonably needed to respond to and manage your enquiry, after which they are securely deleted when no longer required.
How I use your information
- Provide hypnotherapy sessions
- Communicate with you about appointments and practical arrangements
- Maintain appropriate professional records
- Support safe, ethical, and effective therapeutic work
Your information is not used for marketing purposes without your explicit consent.
Lawful basis for processing
I only collect and use personal information where there is a clear and lawful reason to do so.
If you make an initial enquiry, I use the information you provide so that I can respond to you, answer your questions, and take any practical steps you ask me to take before therapeutic work begins.
If you become a therapy client, I use your information where it is needed to provide and manage therapeutic services, communicate with you about appointments and practical arrangements, keep appropriate professional records, and meet any legal, professional, insurance, accounting or safeguarding responsibilities.
Therapy-related information may include sensitive personal information, such as information about health, emotional wellbeing or personal circumstances. I only use this type of information where it is necessary for providing confidential therapeutic services, or where there is another lawful reason to use or retain it.
Where I rely on your consent, you may withdraw that consent at any time. This will not affect information that has already been processed lawfully, or information I need to keep in order to meet legal, professional or safeguarding obligations.
How your data is stored and protected
Your information is stored securely and accessed only by me. Reasonable technical and organisational measures are in place to protect your data from unauthorised access, loss, or misuse.
How long your data is kept
Client records are retained in line with professional and legal guidance and are securely deleted when they are no longer required.
Sharing your information
Your personal information is treated as confidential. It is not sold or used for unrelated purposes. It may be processed by trusted service providers acting on my behalf, such as providers used to deliver website contact-form emails and operate my business email. These providers may process information only for the relevant service and under their applicable data-protection terms.
- You give explicit consent, or
- There is a legal or safeguarding obligation to do so (for example, where there is a serious risk of harm)
Your data protection rights
- Access the personal data I hold about you
- Request correction of inaccurate information
- Request deletion of your data where appropriate
- Raise concerns about how your data is handled
You also have the right to make a complaint to the Information Commissioner’s Office (ICO).
Links to other websites
My website may contain links to external websites. I am not responsible for the privacy practices or content of those sites.
Changes to this privacy notice
This privacy notice may be updated from time to time to reflect changes in practice or legal requirements.
Contact
If you have any questions about this privacy notice or how your data is handled, you are welcome to contact me at: