Privacy Policy for HHC Training (a Division of Halifax Hypnotherapy Clinic Ltd) Website Activity

Effective Date: April 2026

At HHC Training, a division of Halifax Hypnotherapy Clinic Ltd, we take your privacy seriously. This Privacy Policy explains how we collect, store, use, and protect your personal data when you visit our websites, subscribe to our mailing list, register for events, or interact with us via third-party platforms such as Fresha, Zoom, MailerLite, or through testimonials and reviews.

1. Who We Are
HHC Training
A division of Halifax Hypnotherapy Clinic Ltd
Company Number: 13724070
Registered Address: BBW Business Centre, 12 Wade House Road, Halifax, HX3 7PB

Websites covered by this policy:

www.hhctraining.co.uk
www.hhctraining.uk
www.hypnotherapy-supervision-cpd.uk
 
2. What Data We Collect
We may collect and process the following types of data:

Identity Data: Name, title, and profession
Contact Data: Email address, phone number, mailing address
Booking Data: Details of training or CPDs booked through our systems (e.g. Fresha)
Marketing Preferences: Your preferences for receiving communications
Technical Data: IP address, browser type, browsing activity on our sites (via cookies)
Event Participation Data: Attendance, feedback, and engagement during Zoom training sessions
 
3. How We Collect Your Data
We collect data when you:

• Fill in a form / booking or contact us via our websites
• Sign up to our mailing list through MailerLite
• Book a session via Fresha
• Attend a training event delivered via Zoom
• Submit a testimonial or review
• Engage with our social media or external marketing 
• We also use cookies and analytics to better understand how visitors use our websites.

 
4. How We Use Your Data
We use your data to:

• Deliver the services and events you’ve requested
• Send you relevant updates and information (with your consent)
• Manage attendance, CPD certification, and feedback
• Issue invoices and receipts for services
• Improve the quality and relevance of our website and communications
• Fulfil any legal or regulatory requirements
   
  5. Our Use of Third-Party Services
  We use trusted third-party platforms to support our services:

Fresha – for booking and managing appointments

Luma - for event hosting

Email Octopuss – for managing email communications and newsletters

Zoom – for hosting online training and CPD events

These platforms have their own privacy policies and data protection practices.

 
6. Testimonials and Reviews
We may invite you to share feedback or a testimonial following your participation in one of our CPDs, workshops, or training events.

Testimonials may be used for marketing and promotional purposes, including:

• Our websites
• Social media platforms (e.g. Facebook, Instagram, LinkedIn)
• Google reviews
• Trustpilot or other review platforms
• Printed materials and course brochures
  
  You consent to us publishing your testimonial and/or name if we use your feedback for advertising purposes. We will always aim to use this information respectfully, and you may request that we anonymise it (e.g. using initials or a first name only).

If you submit a review via Google, please be aware that Google will automatically publish the information from your Google profile (such as your name and profile image) along with your review. We have no control over the information you submit to Google or how it is displayed, and your data will be governed by Google’s own privacy policy.
If at any point you would like us to remove your testimonial from our website, marketing materials, or social platforms under our control, please email us at [email protected] and we will remove it promptly.
 
7. Marketing and External Advertising
We may advertise our CPDs and events via third-party directories or platforms. If you register through one of these, your personal data may be subject to their privacy policies. We only collect and use data from these sources when you interact with us directly.

We may also send marketing communications via MailerLite if you’ve opted in. You can unsubscribe at any time.

 
8. Data Sharing
We do not sell or rent your personal data. We only share it:

With trusted service providers who support our operations
When legally required (e.g. safeguarding, tax compliance)
All third parties are contractually required to handle your data securely and in accordance with data protection laws.

 
9. Data Security
We implement appropriate technical and organisational safeguards to keep your data secure, including secure servers, encrypted storage where required, and restricted access to sensitive information.

 
10. Your Rights
Under UK GDPR, you have the right to:

• Access the data we hold about you
• Request corrections to inaccurate data
• Request deletion or restriction of processing
• Withdraw consent for communications
• Object to processing in certain circumstances
  
  To exercise your rights, please contact us at [email protected]

 
11. Data Retention
We keep your data only as long as necessary to fulfil the purposes outlined in this policy, and as required by law (e.g. tax and training certification requirements).

 
12. Cookies and Analytics
We use cookies to improve site functionality and performance. You can control cookies through your browser settings. For more information, please refer to our [Cookie Policy].

 
13. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted on our websites and take effect immediately upon publication.

 
14. Contact Us
If you have any questions or concerns about this policy or your personal data, contact:

HHC Training 
Email: [email protected]
Web: www.hhctraining.co.uk

Privacy Policy for HHC Supervision Community (a Division of Halifax Hypnotherapy Clinic Ltd) 

Effective Date: April 2026

In addition to the above privacy policy for visiting our website, we also implement the following privacy policy in relation to HHC the Supervision community which includes face to face encounters, Zoom based supervision sessions and the group's community WhatsApp group. 

PRIVACY POLICY: HHC SUPERVISION
Last Updated: April 2026

Effective Under: UK GDPR & Data Use and Access Act (DUAA) 2025

1. Introduction
HHC Supervision ("we," "us," or "the Company") is committed to protecting the privacy and security of our members’ personal data. This policy explains how we collect, use, and protect your information, particularly within our digital communities (e.g., WhatsApp, Slack, or LinkedIn).

2. Lawful Basis for Processing
We process your personal data under the following legal bases:

• Contractual Necessity: To provide supervision services and manage your subscription.
• Legitimate Interests: To facilitate networking, professional peer support, and community engagement.
• Recognised Legitimate Interests (DUAA 2025): Where processing is necessary for safeguarding vulnerable individuals or crime prevention (e.g., monitoring group safety).

3. Data Collection in Digital Communities
When you join an HHC Supervision group, your profile information (name, phone number, and photo) becomes visible to other members.

• Purpose: The data is shared solely for the purpose of the group’s specific networking and professional objectives.
• Retention: We retain your data for the duration of your membership.
  Upon leaving, your data remains in the group’s history as per the third-party platform's terms (e.g., WhatsApp’s archive).
  
  4. Member Conduct & Data Misuse (DUAA 2025 Compliance)
  
  Under the Data Use and Access Act 2025, HHC acts as the Data Controller for the group environment. However, individual members who extract data for personal use act as independent Data Controllers and are legally liable for their actions.

Strict Prohibitions:

• Unauthorised Outreach: Members must not harvest contact details from the group to contact other members directly without explicit, documented consent.
• Purpose Limitation: Using member data for marketing, personal gain, or "off-platform" recruitment is a breach of this policy and UK law.
  
  Any member found in breach will be immediately terminated from HHC services and may be reported to the Information Commission (formerly the ICO).
  
  5. Your Rights
  Under the UK GDPR and DUAA 2025, you have the following rights:
• Right of Access: You may request a copy of the data we hold. Per DUAA Section 46, we will conduct a "reasonable and proportionate search" to fulfill your request.
• Right to Erasure: You can request the deletion of your data from our internal records.
• Right to Complain: You have a right to lodge a complaint regarding our data practices.

6. Internal Complaints Procedure (New DUAA Requirement)
HHC has established a formal process for handling data protection concerns:

• Submission: Complaints must be sent to [[email protected]] We will acknowledge your complaint within 30 days (as required by DUAA 2025).
• Resolution: We will investigate and provide a final response "without undue delay," keeping you informed of our progress.

7. International Transfers
If we transfer data outside the UK (e.g., via US-based cloud storage), we always ensure the recipient country meets the "Data Protection Test" under DUAA 2025, ensuring standards are "not materially lower" than those in the UK.

8. Security
We implement industry-standard technical and organisational measures to secure your data. However, as third-party platforms (like WhatsApp) are used, members are encouraged to review their own privacy settings on those apps.

 9. Contact Us
For any questions regarding this policy or to report a member for unauthorised contact, please contact:

HHC Data Protection Email: [[email protected]]

Address: [BBW Business Centre, Wade House Road, Halifax  HX3 7PB]

13. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted on our websites and take effect immediately upon publication.

14. Contact Us
If you have any questions or concerns about this policy or your personal data, contact:

HHC Training & Supervision  
Email: [email protected]
Web: www.hypnotherapy-supervision-cpd.uk