Data Storage, Retention, and Secure Deletion at HTU
Last Updated: 02/27/2026
Issued by: Hypnotic Takeoff Universal, LLC
This Data Storage, Retention, and Secure Deletion Policy describes how the personal data of users who visit and use the websites and services operated by Hypnotic Takeoff Universal, LLC and its affiliated brands (collectively, the “Website”) is collected, used, and protected. This policy complements our Privacy Policy. By accessing or using the Website, the User agrees to the practices described in this Data Storage, Retention, and Secure Deletion Policy.
This Data Storage, Retention, and Secure Deletion Policy applies to all brands and platforms operated by Hypnotic Takeoff Universal, LLC, including but not limited to hypnotictakeoff.llc and any associated digital products, programs, and services (collectively, the “Services”). It describes how we collect, use, store, and protect personal information when you visit our websites, interact with our content, book and attend sessions, or otherwise engage with us online or offline.
HTU provides educational, personal‑development, and hypnosis‑based services. We are not a medical clinic, hospital, or mental‑health practice, and we do not diagnose, treat, or prescribe. Nothing in this policy should be understood as creating a doctor–patient or psychologist–client relationship.
If you do not agree with this policy, please do not use our websites or services.
1. Information we collect
We only collect information that is relevant to providing our Services, managing our relationship with you, and maintaining the security and proper functioning of our systems.
1.1 Information you provide directly
When you interact with us, you may provide:
Contact details: name, preferred name, email address, phone number, city/country, time zone.
Account and booking information: session bookings, package details, program enrollments, dates and times of sessions, feedback or questionnaires you choose to complete.
Intake form information: background information about your goals, areas you want to work on, prior experience with hypnosis or similar modalities, and any preferences or boundaries you choose to share. We encourage you to share only what feels necessary and relevant to your goals.
Session‑related notes: information you discuss with us during sessions, which we may summarise in brief notes (for example, themes discussed, goals you identify, suggestions or strategies we agree to explore).
Payment information: billing address, transaction details, and limited card/payment details processed through our payment providers (we do not store full card numbers on our own servers).
Communication content: emails, messages, or form submissions you send us (for example questions about programs, support requests, or feedback).
Consent forms and agreements: signatures or checkboxes confirming you have read and agreed to our terms, this Privacy Policy, and any recording consent where applicable.
1.2 Information we collect automatically
When you visit our websites or interact with our online Services, we (and our service providers) may automatically collect:
Technical data: IP address, browser type and version, device type, operating system, language settings, referring/exit pages, and time/date of your visit.
Usage data: pages viewed, time spent on each page, click paths, scrolling behaviour, downloads, and interactions with forms or embedded content. This helps us understand how people use our site and improve it.
Cookie and tracking data: information stored in cookies or similar technologies (e.g., analytics tags) used to remember preferences, maintain sessions, and measure traffic and performance.
You can control cookies through your browser settings and, where required by law, via our cookie banner or preferences tool.
1.3 Information from third‑party sources
We may receive limited information about you from:
Payment processors (e.g., confirmation of payment status, last four digits of your card, transaction IDs).
Scheduling tools and form platforms (e.g., data you submit to book a session or fill out an application).
Email marketing or automation tools (e.g., email open rates, link clicks, unsubscribe data).
Analytics providers (e.g., aggregate traffic statistics, location approximations based on IP).
We use this information only as allowed by law and as described in this policy.
2. How we use your information
We use personal information only for the purposes described here, or as otherwise explained at the time of collection.
We may use your information to:
Provide, personalize, and manage our Services, including scheduling sessions, sending reminders, and following up on your goals.
Maintain records of sessions and interactions so we can track your progress, honour our agreements, and respond to your requests.
Create and deliver digital content you have purchased or requested, such as courses, programs, and custom hypnosis or audio recordings.
Process payments, handle invoices, and maintain accurate accounting records.
Communicate with you about your sessions, programs, purchases, and support queries.
Send optional updates, educational content, offers, and newsletters if you have opted in (you can unsubscribe at any time).
Improve our websites and Services by analysing usage, troubleshooting technical issues, and testing new features.
Maintain the safety, security, and integrity of our systems and protect our legitimate interests (for example, preventing fraud or misuse of our Services).
Comply with legal obligations, respond to lawful requests, and enforce our terms and agreements.
We do not sell or rent your personal information to third parties.
3. Legal bases for processing (where applicable)
Where data‑protection laws (such as GDPR‑style regimes) apply, we rely on one or more of the following legal bases:
Consent: When you voluntarily provide information, opt into communications, or agree to session recordings. You can withdraw consent at any time, subject to legal and record‑keeping obligations.
Contract: To perform our agreements with you, such as delivering sessions, programs, and purchased content.
Legitimate interests: To operate, secure, and improve our Services, manage our business, and communicate with you in ways you would reasonably expect. We balance these interests against your rights and freedoms.
Legal obligations: To comply with applicable laws, tax rules, accounting requirements, and data‑protection obligations.
4. Cookies and similar technologies
Our websites may use cookies and similar technologies to:
Remember your preferences (e.g., language, cookie choices).
Maintain secure sessions and protect against malicious activity.
Measure traffic, performance, and user engagement through analytics tools.
Where required by law, we will present a cookie banner or settings panel and only place non‑essential cookies (such as analytics or marketing cookies) with your consent.
You can typically manage cookies through your browser settings. Disabling some cookies may affect how the site functions.
5. Session notes, client records, and recordings
Because our work often involves private and sensitive themes, we handle session‑related information with particular care.
5.1 Session notes and client records
We may keep brief notes about sessions and your process, which can include:
Date, time, and format of the session.
Main themes or topics you chose to explore.
Goals you identified and approaches we agreed to use.
Key shifts, insights, or actions you decided to take between sessions.
Any safety or boundary‑related information that is relevant to our ongoing work together.
We aim to keep notes concise, factual, and relevant to our work, and we avoid unnecessary personal details wherever possible.
These notes are stored in encrypted, access‑controlled systems or locked physical storage and are accessible only to the relevant practitioner(s) and, where strictly necessary, limited administrative support (for scheduling or billing purposes only).
5.2 Session recordings
From time to time, and only with your explicit, informed consent, we may audio‑record part or all of a session. Reasons might include:
Creating a custom follow‑up hypnosis audio for your personal use.
Reviewing and improving our own practice, or discussing anonymized excerpts in professional supervision or training contexts (without using your full name or identifiable details).
You are always free to decline recording. We will clearly explain:
Whether a recording will be made and which parts of the session it covers.
How the recording will be stored, for how long, and who can access it.
You can withdraw consent for future recordings at any time.
Raw recordings are stored separately from your main client record in encrypted, access‑controlled storage and are never shared publicly.
5.3 Follow‑up hypnosis audios and digital content
When we create a custom hypnosis or audio recording for you:
We will usually send it via a secure delivery method (for example, a password‑protected link or private download).
You may listen to it for your personal use only. You agree not to share it publicly, resell it, edit it, or use it with others.
We may keep a secure copy for a limited period (for example, up to 1–2 years) so we can resend it if needed, after which it will be deleted or anonymized unless we are required by law to retain it longer.
If we used a full or partial session recording solely to create a follow‑up audio, we will normally delete the original raw recording within a defined timeframe (for example, 30–90 days after the final audio has been delivered), unless law or legitimate interests require longer storage.
6. Data retention
We keep personal information only for as long as necessary for the purposes described in this policy, and to comply with applicable legal, tax, and professional obligations.
As a general guideline:
Client records and session notes: Typically kept for 7–10 years from your last interaction with us, and for longer where minors are involved (for example, until at least age 21–25), or where law or insurers require a longer period.
Booking and contact records: Kept for around 7 years after your last interaction, to manage our relationship, respond to queries, and comply with obligations.
Payment and accounting records: Kept for the period required by tax and accounting laws in the relevant jurisdiction.
Marketing subscriber data: Kept until you unsubscribe or withdraw consent, then removed or anonymized within a reasonable period (for example, 30 days).
Website analytics data: Retained according to our analytics provider’s standard retention period (often between 14 and 26 months), after which it may be aggregated or anonymized.
Raw session recordings: Kept only as long as necessary for the stated purpose (e.g., creating your follow‑up audio, or for time‑limited supervision) and then securely deleted, unless a longer retention is required by law or needed to protect our legitimate interests.
When a retention period expires, we will either securely delete or anonymize the data so it can no longer be linked to you.
7. How we share information
We do not sell, rent, or trade your personal information. We share it only when necessary and only to the minimum extent needed. For example:
Service providers: We may share data with trusted third parties who help us deliver our services (e.g., web hosting, email providers, scheduling tools, payment processors, analytics providers). They may only process your data on our instructions and must protect it appropriately.
Professional support: In some cases, we may discuss anonymized case material in supervision or training settings to improve our skills. We do not disclose your full name or other direct identifiers.
Legal and safety reasons: We may disclose information where required by law, court order, or regulatory authorities, or where we believe it is necessary to protect our rights, your safety, or the safety of others, or to investigate potential misuse or unlawful activity.
Business transfers: If we undergo a business restructuring, merger, or asset transfer, your information may be transferred as part of that process, subject to this policy and applicable law.
We take reasonable steps to ensure that any third party receiving data from us handles it securely and in line with relevant privacy laws.
8. International data transfers
Because HTU may work with clients and service providers in different countries, your personal information may be processed in jurisdictions with different data‑protection laws than those in your country of residence.
Where required, we take appropriate safeguards (such as contractual clauses or equivalent mechanisms) to ensure an adequate level of protection for your information in line with applicable law.
9. Security
We use reasonable technical and organizational measures to protect your information from unauthorized access, loss, misuse, or alteration, including:
Encrypted storage and secure passwords for digital records.
Access controls to ensure only relevant practitioners and limited authorized staff can access personal data.
Secure, reputable service providers for hosting, email, and payment processing.
Regular updates and reviews of our systems and practices.
No method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Your rights
Depending on where you live and the laws that apply, you may have some or all of the following rights regarding your personal information:
Right to be informed: To know how we collect and use your information (this policy is part of that).
Right of access: To request a copy of the personal information we hold about you.
Right to rectification: To ask us to correct inaccurate or incomplete information.
Right to deletion (erasure): To request deletion of your information in certain circumstances (for example, where it is no longer needed or where you withdraw consent), subject to our legal and record‑keeping obligations.
Right to restrict processing: To ask us to limit how we use your information in specific situations.
Right to object: To object to certain types of processing, such as direct marketing.
Right to withdraw consent: Where we rely on consent (for example, marketing or recordings), you can withdraw consent at any time.
Right to data portability (where applicable): To receive certain information in a structured, machine‑readable format.
To exercise these rights, please contact us using the details in the Contact us section or via email: hello@hypnotictakeoff.llc. We may request identity verification before responding. We will respond within the timeframe required by applicable law.
If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.
11. Children’s information
Our websites and Services are not directed to children under 18, and we do not knowingly collect personal information from anyone under 18 without appropriate consent and safeguards.
If you believe we have inadvertently collected information from a child without proper consent, please contact us so we can delete it or take other appropriate action.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our Services, our practices, or applicable laws.
When we make material changes, we will revise the “Last Updated” date at the top of this page and, where appropriate, notify you through the website, by email, or by other reasonable means.
13. Contact us
If you have questions about this Privacy Policy, your information, or you want to exercise your privacy rights, you can contact us at:
Hypnotic Takeoff Universal, LLC
- Email: hello@hypnotictakeoff.llc
We encourage you to reach out with any concerns, and we will do our best to respond promptly and transparently.
Hypnotic Takeoff Universal, LLC — Empowering transformation from the inside out.
For questions regarding this Data Storage, Retention, and Secure Deletion Policy, contact us at: hello@hypnotictakeoff.llc