Privacy Policy

Your Privacy Matters

Choosing a therapist is a personal decision and trust is at the heart of that relationship. This Privacy Policy explains what information Brightly Being Therapies collects, why it is collected, how it is kept safe, and your rights under UK data protection law.

Personal information is treated with respect, kept confidential, and never sold or shared for marketing purposes.

Who We Are

Brightly Being Therapies is a sole practice operated by Rowenna Macormac. For the purposes of UK data protection law, Rowenna Macormac is the Data Controller responsible for the personal information you provide.

ICO Registration Number: ZB891810

Contact: rowenna@brightlybeingtherapies.com

The Information We Collect

If you make an enquiry

If you contact us by email or through the website contact form, we may collect your name, email address, and any information you choose to include in your message. This is used solely to respond to your enquiry.

If you become a client

If we begin working together, we will collect information necessary to provide therapy safely and effectively. This may include:

Your contact details
Your date of birth
Your emergency contact's name and telephone number
The name of your GP practice
Information about your physical and mental health relevant to therapy
Current medications
Previous therapeutic support or treatment
Your therapy goals and the reasons you are seeking support
Session notes and records relating to our work together

Some of this information is classed as special category personal data under UK GDPR because it relates to your health. It is only collected where necessary to provide therapy safely and professionally.

How We Use Your Information

We use your personal information only where necessary to provide safe, ethical and effective therapeutic support. This includes:

Responding to enquiries
Conducting an initial consultation
Providing ongoing hypnotherapy and NLP sessions
Tailoring sessions to your individual needs
Maintaining accurate records of our work together
Communicating with you about appointments and agreed follow-up

We do not use your personal information for automated decision-making or profiling.

The Lawful Basis for Processing

Under UK data protection law we must have a valid reason for collecting and using your personal information.

Contract — Most information is processed because it is necessary to provide therapeutic services, including arranging and delivering sessions, maintaining therapy records, and communicating about appointments.

Legal obligation — We are required by law to retain certain financial records for tax purposes.

Legitimate interests — We process some information because it is in our legitimate interests as a professional practice to do so, including maintaining secure client records and attending professional supervision to maintain high standards of care.

Special category health data — Information relating to your physical and mental health is processed on the basis that it is necessary for the provision of health-related therapeutic services and in line with our professional obligations as qualified practitioners.

Who We Share Your Information With

Personal information is treated as confidential and only shared in the following limited circumstances:

Professional supervision — As required by our professional membership body (AfSFH), we attend regular clinical supervision. If aspects of our work are discussed in supervision, all identifying information is removed so that you cannot be identified. Our supervisor is bound by strict confidentiality standards.

Health and safeguarding concerns — In exceptional circumstances we may need to share information if we believe there is a serious risk of harm to you or someone else, or if required to do so by law. Where possible we would discuss this with you first.

Service providers — We use the following third party services to support the running of our practice:

Gmail (Google) — for email communication
Zoom — for online sessions. We do not record sessions. Zoom's privacy policy applies to data processed through their platform.
Wix — for website hosting and contact forms. Wix's privacy policy applies to data processed through their platform.

These providers do not use your information for their own purposes.

How We Store Your Information

Session notes are stored digitally on a password protected Remarkable device while you are an active client. When the therapeutic relationship ends, notes are transferred to a password protected USB drive held securely.

Email correspondence is held within Gmail. Google's privacy policy applies to data held within Gmail.

Access to all client information is limited to Rowenna Macormac only.

How Long We Keep Your Information

Therapy records — Kept for eight years following your final session, in accordance with professional guidelines. If you were under 18 at the time therapy ends, records are kept until your 25th birthday, or 26th birthday if you were 17 when therapy ended. After this period records are permanently deleted.

Enquiry information — If you contact us but do not become a client, your information is deleted within six months unless there is a reason to retain it.

Financial records — Invoices and payment records are kept for six years in line with HMRC requirements.

How We Keep Your Information Secure

We take the security of your personal information seriously. Measures include:

Password protected and encrypted devices
Secure password protected USB storage for archived records
Access to client information restricted to Rowenna Macormac only
Devices kept updated and secure
Confidential practice maintained at all times

Your Rights

Under UK data protection law you have the right to:

Access the personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your information in certain circumstances
Request restriction of how your information is used
Object to certain types of processing
Withdraw consent where processing is based on consent
Request transfer of your information to another provider where applicable

To exercise any of these rights please contact rowenna@brightlybeingtherapies.com. We will respond within one calendar month.

In some cases we may need to retain certain information where there is a legal or professional obligation to do so.

This website is built on Wix and uses essential cookies necessary for the website to function. No additional analytics or tracking cookies are used beyond those standard to the Wix platform. You can manage cookies through your browser settings.

How to Make a Complaint

If you have concerns about how your personal information is handled, please contact us in the first instance at rowenna@brightlybeingtherapies.com. We will acknowledge your complaint within 30 days and aim to respond fully and promptly.

If you are not satisfied with our response, you have the right to raise your concern with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Changes to This Policy

This policy will be updated periodically to reflect changes in practice, technology or legal requirements. The current version will always be available on this website with a revised last updated date.