Privacy Policy
The National Council for Hypnotherapy (‘the NCH’) is committed to protecting the privacy and rights of individuals in accordance with the UK General Data Protection Regulation (‘UK GDPR’) and the Data Protection Act 2018. This Privacy Policy explains how personal data is collected, used, disclosed, and safeguarded.
Who We Are
The NCH is a UK-based professional membership organisation for hypnotherapists.
Data Controller:
The NCH Board
Data Processors: The Executive (Board and Officers)
Email: admin@hypnotherapists.org.uk
Telephone: 0845 544 0788
ICO Registration Number: Z656424X
Lawful Basis for Processing Information
The NCH considers that the lawful basis for processing your personal data is one of legitimate interest, as the role of a membership organisation cannot be achieved without processing your data. Additional lawful bases may include contractual necessity, legal obligation, or consent, depending on the context.
The NCH follows the principles of data protection as outlined in Article 5 of the UK GDPR, ensuring data is:
- Processed fairly, lawfully, and transparently.
- Collected for explicit and legitimate purposes.
- Adequate, relevant, and limited to what is necessary.
- Accurate and kept up to date.
- Kept only as long as necessary.
- Secured against unauthorised access, loss or damage.
What Personal Data is Collected
The NCH may collect and process the following categories of personal data:
- Name, contact details, date of birth.
- Qualifications, CPD records, criminal convictions (if applicable).
- Membership details and professional profiles.
- Payment and transaction records (excluding stored card data).
- Communications, enquiries, complaints.
- Accessibility and learning needs for training purposes.
- Website usage data via cookies.
- Photographs for conferences and marketing (with consent).
Use of Data
The NCH will use your data for purposes such as:
- Processing membership applications and renewals.
- Assessing eligibility and fitness to practise.
- Managing public therapist directories and practitioner profiles.
- Contacting you regarding services, events, journals, podcasts, taster CPDs.
- Handling complaints and disciplinary matters.
- Communicating with NCFE, CNHC, or similar regulators.
- Collecting equality and accessibility data (e.g., learning needs).
- Statistical reporting, auditing, and compliance.
- Liaising with supervisors (with your consent).
We will never sell your data. Bank or card details are not stored.
Publicly Visible Information
When listed in the public directory, the following data may be visible:
- Full name.
- Practice postcode, town/city, phone number, website.
- Qualifications, discipline, overview, NCH registration number.
- Professional photo (if provided).
Your home address and date of birth will never be shared publicly unless explicitly authorised by you.
Data Retention
- Member records: retained for 7 years post-membership.
- Complaint records: retained for 3 years, then anonymised.
- Fitness to practise records: retained per case outcome.
- Historic executive actions: retained for the organisation’s lifetime.
- Criminal record disclosures: retained only during application assessment.
Sharing Your Data
The NCH may share your data with:
- The Executive (where relevant).
- Bodies/ associations (e.g., CNHC, PSA).
- Accrediting bodies (e.g., NCFE).
- Law enforcement (where required).
- Supervisors (with your consent).
International Transfers
Where data is processed outside the UK, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).
Your Data Protection Rights
Under UK GDPR, you have the right to:
- Access your data.
- Rectify inaccurate data.
- Request erasure (‘right to be forgotten’).
- Restrict or object to processing.
- Withdraw consent (if applicable).
- Data portability (if applicable).
To exercise these rights, contact admin@hypnotherapists.org.uk. See our separate Right to Access, Rectification, and Erasure policies for full procedures.
Data Security
The NCH implement appropriate technical and organisational measures to protect personal data.
Cookies and Analytics
The NCH does use cookies to improve website usability and analyse traffic. For more information, please see the Cookie Policy.
External Links
The website may contain links to other websites. The NCH is not responsible for the content or privacy policies of external sites.
Social Media
Any posts or interactions with NCH social media accounts may be publicly visible. Please ensure that you check your own privacy settings when engaging with the NCH online.
Contact Preferences
Members may choose how they receive communications (e.g., post, email, phone). You may update preferences via your membership portal or by contacting us.
Enforcement and Legal Rights
The NCH is registered with the Information Commissioner’s Office (‘the ICO’). If you believe your rights under UK GDPR have been breached, you can contact:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Phone: 0303 123 1113
We do not disclose or comment on the membership status of any individual, whether current or former. Accordingly, we will not respond to any enquiries seeking such information.
All media enquiries should be directed to:
Please note that we are only able to respond to media enquiries submitted via this channel.
Updates
Last updated: 3rd August 2025