IGH3P® Privacy Policy
Last updated: August 2026
1. Our Commitment to Privacy
IGH3P® recognises the importance of protecting the privacy, confidentiality and security of the personal information entrusted to us.
As an international professional body, we believe responsible handling of personal information forms part of our wider commitment to ethical, transparent and accountable professional practice.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information relating to our members, applicants, accredited professionals, training providers, website visitors, event participants, subscribers, enquirers and other individuals who interact with IGH3P®.
It also explains your rights in relation to your personal information and how you can contact us about our processing of your data.
This Policy applies to personal information collected through the IGH3P® website, membership and accreditation processes, the Professional Register, professional-development activities, events, communications, enquiries and other services administered by IGH3P®.
The ICO requires privacy information to be concise, transparent, intelligible and easily accessible, and to explain matters including why information is processed, how long it is retained and with whom it is shared.
2. Who We Are
The legal entity responsible for the processing of personal information described in this Privacy Policy is:
IRISH GUILD OF NLP AND HYPNOTHERAPY PRACTITIONERS AND TRAINERS LTD
trading as:
INTERNATIONAL GUILD OF HYPNOTHERAPY, NLP, AND 3 PRINCIPLES PRACTITIONERS AND TRAINERS – IGH3P®
Throughout this Privacy Policy, we refer to the organisation as “IGH3P®”, “IGH3P”, “we”, “us” or “our”.
IGH3P® is an international professional body based in Northern Ireland.
For the purposes of applicable data-protection legislation, Irish Guild of NLP and Hypnotherapy Practitioners and Trainers Ltd is the data controller where it determines the purposes and means by which personal information is processed. This is consistent with the ICO definition of a controller.
Registered Office
Northwest Regional Science Park
Bay Road
Derry, BT48 7TG
Northern Ireland
United Kingdom
3. Information Commissioner's Office Registration
IGH3P® is registered with the UK Information Commissioner's Office (ICO) as a fee-paying data controller.
ICO Registration Reference: ZB594553
The ICO's public register identifies Irish Guild Of NLP And Hypnotherapy Practitioners And Trainers Ltd as the data controller and also records International Guild of Hypnotherapy, NLP and 3 Principles Practitioners and Trainers as another name of the organisation.
View IGH3P® on the ICO Register
Our registration with the ICO reflects our commitment to responsible data governance and to meeting our obligations under applicable UK data-protection legislation.
Our Ethical Approach to Personal Data
Our approach to data protection reflects the professional and ethical standards we expect throughout IGH3P®.
We aim to handle personal information:
lawfully, fairly and transparently; securely and confidentially; only for appropriate and specified purposes; and only for as long as it is reasonably required.
We recognise that members, applicants, professionals and members of the public place trust in IGH3P® when providing their personal information. Protecting that information is an important part of maintaining that trust.
4. Data Protection Law
IGH3P® is established in Northern Ireland and processes personal information in accordance with applicable UK data-protection and privacy legislation.
This includes, where applicable:
- the UK General Data Protection Regulation (UK GDPR);
- the Data Protection Act 2018;
- the Data (Use and Access) Act 2025 and relevant amendments made by that Act; and
- the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR).
Where IGH3P®'s activities fall within the territorial scope of the EU General Data Protection Regulation (EU GDPR), we will also comply with its applicable requirements.
This may arise, for example, in relation to certain processing involving individuals within the European Economic Area.
The ICO notes that the Data (Use and Access) Act 2025 has amended UK data-protection legislation and that its provisions affecting data protection and PECR are now in force.
5. Information We May Collect
The personal information we collect depends upon your relationship and interaction with IGH3P®.
We may collect:
Identity and contact information
Your name, professional title, postal address, country, telephone number and email address.
Membership information
Your membership category, membership number, application information, renewal information, payment status, membership status and membership history.
Professional information
Qualifications, professional training, experience, areas of practice, specialisms, accreditation level, CPD information, supervision information and evidence submitted in connection with membership or accreditation.
Professional Register information
Information used to maintain our public Professional Register, which may include your name, professional qualification or accreditation level, location, online availability, specialisms, membership or accreditation status and professional contact/profile link.
Training provider information
Information provided in connection with applications for training-provider, programme or course accreditation.
Transaction information
Records concerning membership fees, accreditation fees and other payments. Payment information may be processed directly by our payment-service providers.
Communications
Emails, correspondence, contact-form submissions, enquiries and other communications with IGH3P®.
Professional standards information
Information relating to professional-conduct enquiries, complaints, ethical concerns, investigations or disciplinary procedures.
Technical and website information
Information such as IP address, browser and device information, referring pages, website usage and information obtained through cookies or similar technologies.
The ICF policy supplied as a reference follows a similar distinction between information supplied directly by individuals and information obtained through website and technical interactions.
6. Special Category Personal Data
In some circumstances, information supplied to IGH3P® may include special category personal data.
This could include information relating to health, racial or ethnic origin, religious or philosophical beliefs or other information receiving additional legal protection.
IGH3P® will only process special category personal information where an appropriate lawful basis and, where required, an additional legal condition applies.
We ask individuals not to provide sensitive personal information unless it is necessary for the particular matter being dealt with.
7. How We Use Personal Information
We may process personal information to:
- administer membership applications and annual renewals;
- assess professional accreditation applications;
- assess training-provider and programme accreditation;
- maintain membership and accreditation records;
- maintain and administer the IGH3P® Professional Register;
- verify membership and professional status;
- administer CPD and professional-development activities;
- communicate professional standards, ethical requirements and relevant professional information;
- respond to enquiries;
- administer complaints and professional-conduct procedures;
- process membership, accreditation and other payments;
- organise professional-development activities, meetings and events;
- communicate with members;
- administer and improve our website and services;
- maintain the security and integrity of our systems;
- prevent fraud, misuse and unauthorised activity;
- meet our legal and regulatory obligations; and
- establish, exercise or defend legal claims.
8. Our Lawful Bases for Processing
IGH3P® will only process personal information where there is an appropriate lawful basis.
Depending upon the circumstances, this may include:
Contract — where processing is necessary to provide membership, accreditation or another service you have requested, or to take steps at your request before entering into such an arrangement.
Legal obligation — where processing is necessary for us to comply with applicable law.
Legitimate interests — where processing is necessary for the legitimate interests of IGH3P® or another person and those interests are not overridden by your rights and interests.
Our legitimate interests may include administering and protecting the professional body, maintaining appropriate professional standards, verifying professional status, preventing misuse, managing our relationship with members and improving our services.
Consent — where you have given us valid consent for a particular use of your information. Where we rely upon consent, you may withdraw it in accordance with applicable law.
Other lawful bases may apply where permitted or required by law.
9. The IGH3P® Professional Register
An important function of IGH3P® as a professional body is maintaining a public register of relevant members and accredited professionals.
Information published on the Professional Register may include:
Name • Qualification/Accreditation Level • Location • Online Availability • Professional Specialism • Membership/Accreditation Status • Professional Contact or Profile Link
The purpose of the Register is to enable members of the public, organisations and other interested parties to identify IGH3P® professionals and, where appropriate, verify their current professional status.
Not all personal information held by IGH3P® about a member or accredited professional is published.
Where an individual has chosen to maintain an expanded public professional profile, additional professional information may be displayed in accordance with the applicable profile and register arrangements.
10. Membership and Accreditation Records
IGH3P® maintains records necessary to administer professional membership and accreditation.
These may include application documentation, qualifications, evidence of professional experience, CPD information, supervision information, renewal records, payment status and relevant correspondence.
Information submitted as part of an application may be made available to appropriately authorised individuals responsible for assessing or administering the application.
11. Complaints, Ethics and Professional Conduct
Where IGH3P® receives a complaint or professional concern, we may process information concerning the complainant, the member or accredited professional concerned, witnesses and other persons relevant to the matter.
Information may include correspondence, supporting documentation and, where necessary and lawful, sensitive personal information.
We use this information to assess, investigate and determine matters in accordance with applicable IGH3P® complaints, ethical and professional-conduct procedures.
Where necessary to ensure procedural fairness, relevant information may be disclosed to the person against whom a complaint has been made and/or to appropriately authorised persons involved in assessing or determining the matter.
12. Who We May Share Personal Information With
IGH3P® does not sell personal information.
Where necessary and lawful, personal information may be shared with categories of recipients including:
- website and technology providers;
- membership and administrative platforms;
- payment processors;
- email and communications providers;
- IT and security providers;
- professional advisers, including accountants and legal advisers;
- appropriately authorised membership or accreditation assessors;
- persons appointed to administer complaints or professional-conduct procedures;
- regulatory authorities;
- courts and law-enforcement bodies; and
- other service providers processing information on our behalf.
Where another organisation acts as a processor on our behalf, IGH3P® remains responsible for ensuring that its processing arrangements comply with applicable requirements. ICO guidance confirms that controllers retain responsibilities for processing undertaken by processors on their behalf.
13. Technology and Service Providers
IGH3P® uses third-party technology and service providers to support its website, communications, membership administration, payment processing and other online services.
These providers may process personal information on our behalf where necessary to provide their services.
Appropriate data-protection arrangements will be used where required.
14. International Transfers
IGH3P® is an international professional body, and some service providers, members and professional activities may be located outside the United Kingdom.
Where personal information is transferred from the United Kingdom to another country and that transfer is subject to UK GDPR international-transfer restrictions, IGH3P® will use an appropriate transfer mechanism where required by law.
Where the EU GDPR independently applies to particular processing, we will also comply with applicable EEA international-transfer requirements.
15. Communications and Direct Marketing
IGH3P® may send members and accredited professionals administrative or service communications necessary to manage their relationship with the professional body.
These may include:
membership renewal reminders, accreditation information, professional-standard updates, CPD information, changes affecting professional status and other communications relevant to membership or accreditation.
These administrative communications are distinct from optional direct marketing.
Where required by applicable law, we will obtain the necessary consent before sending electronic direct-marketing communications.
You may unsubscribe from marketing communications using the unsubscribe facility provided in the communication or by contacting IGH3P®.
16. Cookies and Similar Technologies
IGH3P® uses cookies and similar technologies in connection with its website.
We maintain a separate Cookie Policy explaining the types of cookies and similar technologies used, their purposes and how visitors can manage their preferences.
Please see our IGH3P® Cookie Policy for further information.
This separation is appropriate: the ICO confirms that website visitors should be informed about cookies and what they do, and that agreement is generally required where cookies are not strictly necessary.
17. Data Security
IGH3P® takes appropriate technical and organisational measures designed to protect personal information against unauthorised or unlawful access, disclosure, alteration, loss, destruction or misuse.
Access to personal information is restricted, where appropriate, to individuals who require access for legitimate IGH3P® functions.
We also expect service providers processing information on our behalf to implement appropriate security and confidentiality measures.
While reasonable measures are taken to protect personal information, no internet-based system or method of electronic storage can be guaranteed to be completely secure.
18. How Long We Keep Personal Information
IGH3P® retains personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable professional, contractual, financial, complaints, regulatory and legal requirements.
Different categories of information may therefore be subject to different retention periods.
When personal information is no longer reasonably required, it will be securely deleted, anonymised or otherwise appropriately disposed of.
The ICO identifies retention periods, or the criteria used to determine them, as information that should be addressed in privacy information.
19. Your Data Protection Rights
Subject to applicable legislation, conditions and exemptions, you may have rights including:
- the right to be informed about how your information is used;
- the right of access to personal information held about you;
- the right to rectification of inaccurate or incomplete information;
- the right to erasure in certain circumstances;
- the right to restrict processing in certain circumstances;
- the right to data portability where applicable;
- the right to object to certain processing, including direct marketing; and
- rights relating to certain forms of automated decision-making and profiling.
These rights do not necessarily apply in every circumstance.
To exercise a data-protection right, please contact IGH3P® using the details below.
We may request appropriate information to verify your identity before fulfilling a request.
20. Data Protection Officer
The ICO's public register currently identifies:
Ms Zita Bertha
as the Data Protection Officer for Irish Guild Of NLP And Hypnotherapy Practitioners And Trainers Ltd.
Data-protection enquiries and requests may be directed to IGH3P® using the contact information provided at the end of this Policy.
21. Complaints About Our Use of Your Personal Information
If you are concerned about the way IGH3P® has collected or used your personal information, we encourage you to contact us in the first instance so that we can investigate and respond to your concern.
You also have the right to raise a concern or make a complaint to the UK's independent data-protection regulator:
Information Commissioner's Office (ICO)
Information Commissioner's Office
Where the EU GDPR applies to particular processing, you may also have a right to lodge a complaint with the competent supervisory authority in the relevant EEA country.
22. Third-Party Websites
The IGH3P® website may contain links to websites, platforms or services operated independently by third parties.
IGH3P® is not responsible for the privacy practices of independent third-party organisations.
We encourage visitors to review the privacy information of any third-party website or service before providing personal information to it.
23. Children's Personal Information
IGH3P® professional membership and accreditation services are primarily intended for adults and professional practitioners.
We do not knowingly seek to collect personal information from children through our professional membership and accreditation services unless there is a legitimate and lawful reason to do so.
Where services are likely to be accessed by children, IGH3P® will take account of applicable additional data-protection requirements.
24. Changes to This Privacy Policy
IGH3P® may amend this Privacy Policy periodically to reflect changes in our activities, professional services, technology, regulatory requirements or applicable law.
The latest version will be published on the IGH3P® website and will display the date on which it was most recently updated.
Where a material change affects how we process personal information, we will take reasonable steps to bring the change to the attention of affected individuals where required.
25. Contact IGH3P® About Your Personal Data
For questions concerning this Privacy Policy, the way we process your personal information, or to exercise a data-protection right, please contact:
IRISH GUILD OF NLP AND HYPNOTHERAPY PRACTITIONERS AND TRAINERS LTD
trading as
INTERNATIONAL GUILD OF HYPNOTHERAPY, NLP, AND 3 PRINCIPLES PRACTITIONERS AND TRAINERS – IGH3P®
Registered Office
Northwest Regional Science Park
Bay Road
Derry, BT48 7TG
Northern Ireland
United Kingdom
Data Protection Officer: Ms Zita Bertha
ICO Registration Reference: ZB594553
Email: registrar@igh3p.com