Last updated: June 2026

This Privacy Notice explains how I collect, use, store and protect personal information when you visit this website, contact me, make an enquiry, attend a consultation, or work with me as a client.

I aim to keep your information safe, use it only where necessary, and be clear about how it is handled.

Who I am

The data controller is:

Adrian Tannock / Lasting Change Hypnotherapy Manchester
Practice address:
244 Deansgate
Manchester
M3 4BQ

Telephone: 07790 506375

Email:info@lastingchange.co.uk

If you have any questions about this Privacy Notice or how your personal information is used, please contact me using the details above.

What personal information I collect

The information I collect depends on how you interact with me.

This may include:

your name
phone number
email address
postal address, if needed
enquiry details
information you provide through website forms
appointment details
consultation notes
therapy notes
background information relevant to the work
health, emotional and psychological information
GP details, where requested
risk, safeguarding or emergency contact information, where relevant
payment or invoice information
emails, text messages or other correspondence

Because I provide therapy and hypnotherapy services, some of the information you give me may include health information. Health information is treated as special category data under UK data protection law and is handled with extra care.

How I collect your information

I may collect information when you:

use the contact form on this website
email, phone or message me
complete a consultation or intake form
attend an initial consultation
attend therapy or hypnotherapy sessions
pay for sessions
give feedback or provide a review
use this website

Why I use your information

I use your personal information to:

respond to enquiries
decide whether my service is suitable for your needs
arrange consultations and sessions
provide hypnotherapy and related therapeutic services
keep appropriate clinical and administrative records
manage appointments, fees and payments
communicate with you about your sessions
comply with professional, legal and insurance requirements
manage risk, safeguarding or serious welfare concerns where necessary
maintain the security and proper functioning of this website
improve the clarity and usefulness of my service

I do not sell your personal information.

Lawful basis for using your information

Under UK GDPR, I need a lawful basis to use your personal information.

Depending on the context, I may rely on:

Contract — to provide services you have requested or to take steps before entering into a client agreement.
Legitimate interests — to respond to enquiries, manage appointments, keep appropriate records and run my practice.
Legal obligation — where I am required to keep records or disclose information by law.
Vital interests — where there is a serious and immediate risk to life or safety.
Consent — where I ask for your clear permission for a specific purpose, such as optional marketing or non-essential website cookies.

For health information and other special category data, I rely on the relevant UK GDPR and Data Protection Act conditions that allow health-related information to be processed for the provision of care, therapy, safeguarding, legal claims, professional obligations or with your explicit consent where appropriate.

Consultation forms, intake forms and therapy records

Before starting work, I may ask you to complete forms that help me understand your situation, health background, goals, risk factors and practical needs.

During therapy, I keep appropriate notes and records. These help me provide safe, professional and consistent support.

I only ask for information that is relevant to the service I provide.

Use of Upheal and session transcription

I use Upheal, a secure clinical documentation platform, to support note-taking and record keeping.

Sessions are recorded through Upheal so that a transcript and clinical notes can be created. This applies from the initial consultation onwards. I do not keep the audio recordings after the notes/transcript process has been completed, but the transcripts and notes are retained as part of the clinical record.

I will explain this before we begin work together. I do not see clients without using this recording and transcription process.

How long I keep your information

I keep client records, including transcripts and clinical notes, for 8 years after the end of our work together, in line with my professional and insurance requirements.

After this period, records are securely deleted or destroyed unless there is a lawful reason to keep them for longer.

Enquiry information from people who do not become clients is normally kept only as long as needed to respond to the enquiry and manage any follow-up, unless there is a legitimate reason to keep it for longer.

Financial records may be kept for the period required for tax, accounting and legal purposes.

Who I share information with

I treat your information as confidential.

I may share limited information where necessary with:

secure clinical record systems, such as Upheal
website, email, hosting or IT service providers
payment or accounting services
professional insurers or legal advisers, if needed
professional supervisors or advisers, where appropriate and usually without identifying details where possible
your GP or another professional, but normally only with your knowledge or consent
safeguarding bodies, emergency services or legal authorities where there is serious risk or a legal duty to disclose

I will not share your information unnecessarily.

Confidentiality and its limits

Therapy is confidential, but confidentiality is not absolute.

I may need to share information if:

there is a serious risk of harm to you or another person
there is a safeguarding concern involving a child or vulnerable adult
I am required to do so by law or court order
there is a serious crime, terrorism, money laundering or similar legal issue
disclosure is necessary to protect life or safety

Where possible, I would normally try to discuss this with you first, unless doing so would increase risk or be legally inappropriate.

Adults only

I work with adults aged 18 and over. I do not knowingly provide therapy or hypnotherapy services to children.

Reviews and testimonials

If you choose to leave a review or testimonial, this is voluntary.

I will not publish identifying details on this website without your permission. If you leave a review on a third-party platform such as Google, that platform’s own privacy policy will also apply.

Website forms and email

If you contact me through the website form or by email, the information you send is used to respond to your enquiry.

Please avoid sending highly sensitive information through the website form. A short summary of what you want help with is enough to begin.

Cookies and analytics

This website may use cookies or similar technologies to make the site work properly, understand how visitors use the site, improve the website, or support security.

Some cookies are essential for the website to function. Other cookies, such as analytics or marketing cookies, should only be used where the appropriate consent has been given.

You can control cookies through your browser settings and, where available, through the website’s cookie banner or consent settings.

For more information, please see the website’s Cookie Policy.

Links to other websites

This website may include links to other websites, such as professional registers, Google Books, review platforms or other third-party services.

I am not responsible for the privacy practices of other websites. You should read their privacy notices if you visit them.

How I protect your information

I take reasonable steps to protect your personal information from unauthorised access, loss, misuse or disclosure.

This includes using secure systems where appropriate, limiting access to client information, and keeping records only for as long as needed.

No method of electronic communication or storage is completely risk-free, but I aim to use appropriate safeguards for the type of information I hold.

Your rights

Under UK data protection law, you have rights over your personal information.

These may include the right to:

be informed about how your information is used
access a copy of your personal information
ask for inaccurate information to be corrected
ask for information to be deleted in certain circumstances
ask for processing to be restricted in certain circumstances
object to processing in certain circumstances
ask for information to be transferred in certain circumstances
withdraw consent where processing is based on consent

Some rights are not absolute. For example, I may need to keep certain records for professional, legal, insurance or safeguarding reasons.

If you want to exercise any of these rights, please contact me using the details above.

Complaints

If you have concerns about how I handle your personal information, please contact me first so I can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

Information Commissioner’s Office
Website: https://ico.org.uk
Telephone: 0303 123 1113

Changes to this Privacy Notice

I may update this Privacy Notice from time to time. The most recent version will be published on this website with the updated date shown at the top.