Barry HoneycombeHypnotherapyFree conversation

Your information

Privacy policy

How Barry Honeycombe Hypnotherapy collects, uses and protects your personal information.

Last updated: 3 August 2026

This notice is written for clients, prospective clients and website visitors. It is intended to meet the transparency requirements of the UK GDPR and Data Protection Act 2018 (as amended).

1. Who we are

Barry Honeycombe, trading as Barry Honeycombe Hypnotherapy, is the data controller for the personal information described in this notice.

Contact: hello@barryhoneycombehypnotherapy.co.uk
Location: Deal, Kent, United Kingdom

ICO data protection fee registration: pending. The registration number will be added here when available. Sole traders who use personal information may need to pay the ICO data protection fee unless exempt; the ICO's official self-assessment explains the position.

2. Information we may collect

  • Enquiry details: name, email address, phone number, preferred session format and the broad reason for your enquiry.
  • Client administration: appointment history, correspondence, invoices and payment status. Full card details are not held by Barry if a payment provider is used.
  • Session and intake information: goals, relevant personal history, session notes and information you choose to share about your physical or mental health. Health information is "special category data" and receives additional protection.
  • Technical information: basic security and server logs, which may include IP address, browser type and request time.

Please avoid sending detailed medical information through the initial website enquiry. If you decide to work with Barry, any necessary intake information will be collected more appropriately.

3. How and why we use it

PurposeLawful basis
Responding to an enquiry and discussing a possible bookingTaking steps at your request before a contract, and legitimate interests in running the practice
Providing and administering booked servicesPerformance of a contract
Invoices, tax and legal recordsLegal obligation
Practice security, claims and service improvementLegitimate interests, balanced against your rights

Where Barry needs to use health information or other special category data, he relies on your explicit consent under Article 9(2)(a) UK GDPR. Consent is requested clearly and can be withdrawn at any time. Withdrawal does not affect earlier lawful use, but it may mean a service cannot continue if the information is necessary to provide it safely.

Information is not used for automated decision-making. Marketing emails will only be sent if you separately opt in, and you may unsubscribe at any time.

4. Who information may be shared with

Information is shared only where necessary with carefully selected providers such as email, secure video, appointment, payment, website hosting or professional IT services. Those providers act under their own legal duties or on instructions and are given only the information they need.

Information may also be disclosed where required by law, to obtain confidential legal or insurance advice, or where Barry reasonably believes disclosure is necessary to protect someone from serious harm. It is never sold.

Some technology providers may process information outside the UK. Where this happens, an approved safeguard is required, such as UK adequacy regulations or contractual protections.

5. How long information is kept

  • Unbooked enquiries: normally up to 12 months after the last contact.
  • Client notes and service records: normally up to 7 years after the work ends, unless a different period is required by law, insurance or an applicable professional obligation.
  • Invoices and tax records: normally 6 years after the relevant financial year.
  • Marketing consent records: until you withdraw consent, plus a minimal suppression record so your preference can be respected.

Information is securely deleted or anonymised when it is no longer needed.

6. Security and confidentiality

Reasonable technical and organisational safeguards are used, including access controls, device security, confidential working practices and secure service providers. No internet transmission can be guaranteed completely secure, so please do not send highly sensitive detail in an initial email.

Sessions are confidential, subject to limited exceptions such as legal requirements or a serious and immediate risk of harm. Any exception will be handled carefully and, where possible, discussed with you first.

7. Cookies and website analytics

This website does not intentionally use advertising cookies, behavioural tracking or non-essential analytics. The hosting service may process essential technical logs to deliver and protect the site. If analytics or optional cookies are added later, this notice and any consent controls will be updated first.

8. Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict your information; object to certain uses; receive portable data; and withdraw consent. You also have the right to object to processing based on legitimate interests. These rights are not absolute, but every request will be considered promptly.

To exercise a right, email Barry using the address below. Identity may need to be verified. You can also complain to the Information Commissioner's Office, although Barry would appreciate the opportunity to address your concern first.

9. Questions or concerns

Email hello@barryhoneycombehypnotherapy.co.uk. This notice may be updated when services or legal requirements change; the date at the top shows the latest version.

Go to the contact page