Privacy Policy
Effective Date: September 24, 2025
The National Institute of Hypnotherapy is committed to protecting the privacy and confidentiality of our clients’ personal information. This Privacy Policy outlines how we collect, use, store, and share your personal information in accordance with applicable privacy laws and regulations in Canada, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and any relevant provincial legislation.
1. Collection of Personal Information
We collect only the personal information necessary to provide you with professional hypnotherapy services. This may include:
- Full name, address, phone number, and email address
- Date of birth and emergency contact information
- Health and medical history relevant to hypnotherapy treatment
- Session notes and treatment progress
- Payment and billing information
We collect personal information directly from you, with your knowledge and consent.
2. Use of Personal Information
We use your personal information for the following purposes:
- To assess your suitability for hypnotherapy
- To plan, provide, and document your care
- To communicate with you about your appointments or services
- To process payments and issue receipts
- To comply with legal or regulatory requirements
Your information will not be used for any other purpose without your consent.
3. Sharing of Personal Information
We do not sell or trade your personal information. We may share your information only in the following circumstances:
- With your consent, such as when coordinating care with other health professionals
- As required by law, including in situations of legal reporting, court orders, or mandatory disclosures (e.g., risk of harm to self or others)
- With secure third-party service providers who help us deliver our services, including:
- Stripe, a secure online payment processor, used to handle credit card payments. Stripe is PCI-DSS compliant and maintains industry-standard encryption and data protection protocols.
- Zanda, a secure practice management platform that helps us manage scheduling, intake forms, and clinical notes, in compliance with Canadian privacy laws.
All third-party providers we use are carefully selected and contractually obligated to maintain the confidentiality and security of your information.
4. Case Review and Care Optimization
We may confidentially discuss aspects of client cases (without revealing identifying information) with qualified colleagues or supervisors for the purposes of professional consultation, training, and optimizing the quality of care. These discussions are conducted in a manner that upholds client confidentiality and complies with relevant data protection laws.
5. Storage and Protection of Information
Your personal information is stored securely, whether in physical or electronic form. We take reasonable steps to protect your information from unauthorized access, disclosure, or misuse, including:
- Secure file storage
- Encrypted digital systems
- Confidentiality agreements and privacy training for anyone with access to client data
Client records are retained for the period required by law and professional regulations, after which they are securely destroyed.
6. Your Rights
As a client, you have the right to:
- Access your personal information upon request
- Correct inaccurate or incomplete information
- Withdraw your consent (subject to legal or professional limitations)
- Ask questions or make a complaint about our privacy practices
To exercise these rights, please contact us at the information below.
7. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on our website.