Privacy Statement
Last updated: 9th August 2026
Hypnotherapy Works takes your privacy seriously. This statement explains what information is collected, why, and what happens to it.
If you have any questions, contact Doreen Davis at info@hypnotherapyworks.ie.
Who is responsible for your information
Doreen Davis, trading as Hypnotherapy Works, is the data controller.
Contact: info@hypnotherapyworks.ie
What information is collected
If you contact me through the website or by email
Your name, email address, phone number if you provide it, and whatever you choose to tell me about why you're getting in touch.
If you become a client
Health and background information relevant to the work we do together, session notes, and — where you have separately consented — audio recordings of sessions.
If you visit the website
Anonymous statistics about pages visited and how the site was found. See the Cookie Statement.
Why it is collected
Your enquiry details are used to reply to you and arrange a consultation. The legal basis is legitimate interest.
Health and background information is used to provide therapy safely and appropriately. The legal basis is your explicit consent under Article 9(2)(a) of GDPR.
Session recordings are made only where you have separately agreed, so that you can revisit the session afterwards. The legal basis is your explicit consent.
Website statistics help me understand how the site is used. The legal basis is your consent, given through the cookie banner.
Health information is treated as special category data under GDPR and handled with additional care. It is only collected with your explicit written consent, and you can withdraw that consent at any time.
Who it is shared with
Your information is not sold, and is not shared for marketing.
It is stored using Google Workspace, which acts as a data processor under contract. Google's servers may be located outside Ireland; Google provides contractual safeguards for this.
Information would only be disclosed to a third party where:
• You ask me to, in writing
• There is a serious and immediate risk to your safety or someone else's
• I am required to by law or a court order
If a disclosure of that kind ever became necessary, I would tell you wherever it was safe and possible to do so.
How long it is kept
Enquiries that don't become clients are deleted after 12 months.
Consent forms and assessment forms are kept for [7] years after our last session.
Session notes are kept for [7] years after our last session.
Session recordings are permanently deleted 30 days after the session.
Website statistics are kept for 14 months.
Recordings are kept only briefly. Once your copy has been sent to you, mine is deleted.
How it is kept safe
• Stored in Google Workspace with two-factor authentication
• Access restricted to Doreen Davis only
• Files identified by reference code rather than name where possible
• Nothing stored on personal devices or unsecured drives
Your rights
Under GDPR you have the right to:
• Ask what information is held about you, and get a copy
• Have inaccurate information corrected
• Ask for your information to be deleted
• Withdraw consent at any time, including consent to recording
• Object to or restrict how your information is used
• Receive your information in a portable format
• Complain to the Data Protection Commission
Withdrawing consent does not affect anything done before you withdrew it, and it will never affect your access to therapy.
To exercise any of these, email info@hypnotherapyworks.ie. I will respond within one month.
Complaints
If you're unhappy with how your information has been handled, please tell me first — I'd rather put it right.
You also have the right to complain directly to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963. Their website is www.dataprotection.ie.
Changes to this statement
Any changes will be posted here with an updated date.