Privacy Policy
The National Council for Hypnotherapy (‘the NCH’) is committed to protecting the privacy and rights of individuals in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025, together with any subsequent amendments to UK data protection legislation.
Who We Are
The NCH is a UK-based professional membership organisation for hypnotherapists.
Data Controller:
The NCH Board
Data Processors: The Executive (Board and Officers)
Email: admin@hypnotherapists.org.uk
Telephone: 0845 544 0788
ICO Registration Number: Z656424X
Lawful Basis for Processing Information
The NCH processes personal data in accordance with the lawful bases set out in Article 6 UK GDPR, as amended by the Data (Use and Access) Act 2025. Depending on the purpose of the processing, these lawful bases include:
- performance of a contract;
- compliance with a legal obligation;
- legitimate interests;
- consent;
- protection of vital interests; and
- the performance of a task carried out in the public interest, where applicable.
Where we rely on legitimate interests, we ensure that those interests are balanced against the rights and freedoms of individuals and maintain appropriate records of our assessment where required.
What Personal Data is Collected
The NCH may collect and process the following categories of personal data:
- Name, contact details, date of birth.
- Qualifications, CPD records, criminal convictions (if applicable).
- Membership details and professional profiles.
- Payment and transaction records (excluding stored card data).
- Communications, enquiries, complaints.
- Accessibility and learning needs for training purposes.
- Website usage data via cookies.
- Photographs for conferences and marketing (with consent).
Use of Data
The NCH will use your data for purposes such as:
- Processing membership applications and renewals.
- Assessing eligibility and fitness to practise.
- Managing public therapist directories and practitioner profiles.
- Contacting you regarding services, events, journals, podcasts, taster CPDs.
- Handling complaints and disciplinary matters.
- Communicating with NCFE, CNHC, or similar regulators.
- Collecting equality and accessibility data (e.g., learning needs).
- Statistical reporting, auditing, and compliance.
- Liaising with supervisors (with your consent).
We will never sell your data.
Automated Decision-Making and Artificial Intelligence
The NCH does not make decisions about individuals based solely on automated processing where those decisions produce legal or similarly significant effects.
Where artificial intelligence or automated tools are used to assist administrative activities, these are used only to support human decision-making and are subject to appropriate oversight. Individuals may request further information about any such processing.
Publicly Visible Information
When listed in the public directory, the following data may be visible:
- Full name.
- Practice postcode, town/city, phone number, website.
- Qualifications, discipline, overview, NCH registration number.
- Professional photo (if provided).
Your home address and date of birth will never be shared publicly unless explicitly authorised by you.
Data Retention
- Member records: retained for 7 years post-membership.
- Complaint records: retained for 3 years, then anonymised.
- Fitness to practise records: retained per case outcome.
- Historic executive actions: retained for the organisation’s lifetime.
- Criminal record disclosures: retained only during application assessment.
Sharing Your Data
The NCH may share your data with:
- The Executive (where relevant).
- Bodies/ associations (e.g., CNHC, PSA).
- Accrediting bodies (e.g., NCFE).
- Law enforcement (where required).
- Supervisors (with your consent).
International Transfers
Where personal data is transferred outside the United Kingdom, the NCH ensures that appropriate safeguards are in place in accordance with UK data protection legislation. These safeguards may include UK International Data Transfer Agreements (IDTAs), recognised international adequacy regulations or other approved transfer mechanisms.
Your Data Protection Rights
Under UK GDPR, you have the right to:
- Access your data.
- Rectify inaccurate data.
- Request erasure (‘right to be forgotten’).
- Restrict or object to processing.
- Withdraw consent (if applicable).
- Data portability (if applicable).
To exercise these rights, contact admin@hypnotherapists.org.uk. See our separate Right to Access, Rectification, and Erasure policies for full procedures.
Data Security
The NCH implement appropriate technical and organisational measures to protect personal data.
Cookies and Analytics
The website uses cookies and similar technologies to improve functionality, analyse website performance and enhance the user experience. Where required by law, we will obtain your consent before placing non-essential cookies on your device. Further information can be found in our Cookie Policy.
External Links
The website may contain links to other websites. The NCH is not responsible for the content or privacy policies of external sites.
Social Media
Any posts or interactions with NCH social media accounts may be publicly visible. Please ensure that you check your own privacy settings when engaging with the NCH online.
Website Accessibility
The NCH is committed to making its website accessible to all users. The website incorporates accessibility technology, including the WebAbility accessibility tool, allowing users to personalise their browsing experience through features such as text resizing, colour and contrast adjustments, keyboard navigation, reading assistance and other accessibility options.
Contact Preferences
Members may choose how they receive communications (e.g., post, email, phone). You may update preferences via your membership portal or by contacting us.
Complaints and Data Protection Queries
If you have any concerns regarding how we process your personal data, we encourage you to contact us in the first instance so that we have an opportunity to resolve your concerns.
Enforcement and Legal Rights
The NCH is registered with the Information Commissioner’s Office (‘the ICO’). If you believe your rights under UK GDPR have been breached, you can contact:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Phone: 0303 123 1113
Updates
Last updated: 01.06.2026