Privacy Notice
Keel & Compass – Clinical Hypnotherapy. Last updated: 1 November 2026
This notice explains how Jay Simmons, trading as Keel & Compass, collects, uses and protects your personal information, in line with UK GDPR and the Data Protection Act 2018.
1. Who is responsible for your data
Data controller: Jay Simmons RGN RMN ADCH, trading as Keel & Compass.
Email: [email protected]
Telephone: 07703 744076
2. What information I collect
- Contact and booking details: name, email, telephone, appointment dates and times.
- Intake and health information: medical history, medication, mental health history, goals for therapy, GP details and emergency contact, collected on the Client Intake & Consent Form. This is “special category” data and is treated with extra care.
- Session records: clinical notes written after each session.
- Payment information: confirmation that payment was made. Card details are handled by the payment provider and are not stored by me.
- Website information: see section 9.
Please do not send detailed medical information through the website, ordinary email or text.
3. Why I use your information, and my lawful basis
- Responding to enquiries and arranging appointments: steps at your request before a contract; legitimate interests.
- Providing therapy and keeping clinical records: contract; for health information, provision of health care (Article 9(2)(h)) and your explicit consent (Article 9(2)(a)).
- Taking payment and keeping financial records: contract; legal obligation.
- Keeping you safe, including contacting emergency services: vital interests.
- Complaints, insurance and professional body requirements: legitimate interests; legal obligation.
I do not use your information for marketing without your separate consent, and I never sell your data.
4. Who I share information with
- Your GP or another professional, only with your consent.
- Emergency services or others, where there is a serious risk of harm to you or someone else.
- Others, where required by law or a court order.
- My professional supervisor, using anonymised or minimal information.
- Service providers who help me run the practice (secure email, booking, video and payment providers), who may only process data on my instructions.
5. Online sessions
Sessions take place by secure video. They are not audio or video recorded, and I ask that you do not record them. Please be in a private place. Video and booking providers may process some technical data under their own privacy terms.
6. How long I keep your information
Clinical records are kept for seven years after your last session, then securely destroyed. Enquiries that do not lead to therapy are deleted after 12 months. Financial records are kept as required by law.
7. How I keep your information secure
Records are stored electronically on encrypted, password-protected systems with restricted access. Any paper records are kept locked away. If a data breach is likely to put your rights at risk, I will tell you and the Information Commissioner’s Office (ICO) as required.
8. Your rights
You have the right to access a copy of your information; have inaccurate information corrected; ask for it to be erased (this may be limited by legal and professional record-keeping duties); restrict or object to certain processing; data portability where it applies; and withdraw consent at any time, without affecting earlier processing. To use any of these rights, contact me using the details above. I will respond within one month.
9. Cookies and website data
This website does not set cookies or use analytics. Your device and the website host may log basic technical data, such as IP address and browser type. If this changes I will update this notice.
10. International transfers
Some service providers may process data outside the UK. Where this happens I use providers with appropriate safeguards, such as the UK International Data Transfer Agreement or an adequacy arrangement.
11. Children
My services are for adults aged 18 and over.
12. Complaints
If you are unhappy with how I handle your information, please contact me first. You can also complain to the ICO: ico.org.uk, telephone 0303 123 1113.
13. Changes to this notice
I may update this notice from time to time. The latest version is always on this website.