Privacy Policy

Who am I

I am Natasha Russo, a Cognitive Behavioural Hypnotherapist, trading as Natasha Russo Hypnotherapy. I work with adult clients aged 18 and over and offer Cognitive Behavioural Hypnotherapy online and, where available, in person.

I am registered with the Information Commissioner’s Office (ICO) as a data controller.

The information I collect

In order to provide my service safely, appropriately and effectively, I may collect and process the following types of personal information:

Personal and contact information

• Your name
• Email address and telephone number
• Age
• Country in which you are currently based
• Emergency contact details, where provided

Therapy and health-related information

• Information you choose to share about your experiences, difficulties and therapeutic goals
• Relevant information about your physical or mental health, medication, and current or previous therapeutic or healthcare support
• Information relevant to assessing whether my service is appropriate for you
• Notes relating to sessions and therapeutic work

I only collect information that is relevant and reasonably necessary for providing my service safely and professionally.

You are not required to provide information that is not relevant to the service. However, if information necessary to assess suitability or provide therapy safely and appropriately is not provided, I may be unable to begin or continue working with you.

How I collect your information

Your information may be collected when:

• You contact me via email, telephone, or my website contact form
• You take part in an introductory consultation or other initial communication with me
• You complete intake, consent, or feedback forms
• We work together during therapy sessions, whether online or in person
• You correspond with me about appointments or therapy-related matters

How I use your information

• Assess whether my service is appropriate for you
• Provide Cognitive Behavioural Hypnotherapy sessions
• Communicate with you about appointments and practical arrangements
• Maintain appropriate professional records
• Support safe, ethical, and effective therapeutic work

Your information is not used for marketing purposes without your explicit consent.

Lawful basis for processing

Under UK GDPR, I need a lawful reason to collect and use your personal information.

I process the personal information needed to assess whether my service is appropriate for you and to provide the therapeutic service we agree under the lawful basis of contract.

Some of the information you choose to share with me, such as information about your physical or mental health, is classed as special category data and receives additional protection under UK GDPR. I process this information with your explicit consent where it is needed to assess suitability and provide therapy safely and appropriately.

You can withdraw this consent at any time by contacting me. If I need this information in order to assess suitability or work with you safely and appropriately, withdrawing consent may mean that I am unable to begin or continue therapy.

How your data is stored and protected

Your personal information is stored securely, and access is restricted to me. I take appropriate measures to protect your information from unauthorised access, accidental loss, disclosure or misuse.

I regularly review how personal information is stored and protected to ensure that appropriate security measures remain in place.

How long your data is kept

I keep personal information only for as long as it is reasonably necessary for the purposes for which it was collected, including any professional, insurance or legal requirements that apply to my practice.

Records are reviewed periodically and securely deleted when they are no longer required.

Sharing your information

Your personal information is treated as confidential and is not shared unnecessarily.

I may use trusted third-party services to support the secure operation of my practice, such as email, data storage, online communication and payment services. Where these services process personal information, I take appropriate steps to ensure that your information is handled in accordance with data protection requirements.

I may also disclose information where you have given your consent, where I am required to do so by law, or where there is a serious safeguarding concern or risk of harm.

Your data protection rights

Depending on the circumstances, you may have the right to:

• Access the personal information I hold about you
• Ask me to correct information that is inaccurate or incomplete
• Ask me to delete your personal information in certain circumstances
• Ask me to restrict how your personal information is used in certain circumstances
• Object to certain uses of your personal information
• Ask for certain personal information to be transferred to you or another organisation, where the right to data portability applies
• Withdraw your consent at any time where I rely on consent to process your information

These rights do not apply in every circumstance, and some may be subject to legal or professional requirements.

If you have concerns about how your personal information is handled, you can contact me directly. You also have the right to make a complaint to the Information Commissioner’s Office (ICO).

Links to other websites

My website may contain links to external websites. I am not responsible for the privacy practices or content of those sites.

Changes to this privacy policy

This privacy policy may be updated from time to time to reflect changes in my practice, the services I use, or legal and regulatory requirements.

Contact

If you have any questions about this privacy policy, wish to exercise your data protection rights, or have concerns about how your personal information is handled, please contact me at:

contact@natasharussohypnotherapy.co.uk

Last updated: 02.09.2026