Data Protection Policy

At Hypnotherapy Pvt. Ltd. (“we,” “our,” or “us”), we take your privacy and personal data very seriously. This Data Protection Policy explains how we collect, use, store, and protect your personal information in compliance with applicable data protection laws.

By using our website or services, you consent to the practices described in this policy.

Data We Collect

We may collect the following types of personal and sensitive information:

a. Personal Data

Name, email address, phone number, and billing information
Location, country, and other contact details
Account login information and preferences

b. Sensitive Data

Health-related information shared during therapy sessions
Wellness goals, progress notes, or behavioral insights

c. Technical & Usage Data

IP address, browser type, device information
Pages visited, time spent, and interactions with the website
Cookies and tracking data

Purpose of Data Collection

We collect and process personal data to:

Provide hypnotherapy services and consultations
Manage appointments, payments, and training programs
Communicate important updates, newsletters, or educational resources
Improve website functionality, user experience, and service delivery
Comply with legal and regulatory obligations

Legal Basis for Processing

Data is processed on the basis of:

Consent: Explicit agreement provided by the user
Contractual necessity: To deliver booked sessions or programs
Legal obligations: Compliance with applicable laws
Legitimate interests: Enhancing service quality and user experience

Data Storage & Security

Personal and sensitive data is stored securely using encrypted servers
Access is restricted to authorized personnel only
We implement technical and organizational measures to prevent unauthorized access, loss, or misuse
Despite precautions, no system is completely risk-free

Appointments, Sessions & Cancellations

Appointments must be scheduled in advance

- Session duration, format (online/offline), and fees are communicated prior to booking
- Cancellations or rescheduling must be made at least 24 hours in advance
- Late cancellations or no-shows may result in partial or full session charges

Data Sharing & Third Parties

We may share personal data with:

Trusted third-party service providers (e.g., payment gateways, video conferencing platforms, email tools)
Regulatory authorities if required by law

We do not sell or rent personal information to third parties.

User Rights

You have the right to:

Access your personal data
Correct or update your information
Request deletion of your data
Withdraw consent for data processing
Opt out of marketing communications

Data Retention

We retain personal data only as long as necessary to provide services or comply with legal requirements
Once retention periods expire, data will be securely deleted or anonymized