Jennifer Sexton, CCHt 
Hypnosis & Transformational Arts
yestohypnosis.com  
Last updated 9/14/2026

1. Scope
This policy explains what information I collect through yestohypnosis.com and in the course of working with clients, how I use it, who else handles it, and what choices you have. It applies to visitors to this website, people who submit an application or a form, and clients who book services.
2. What I collect
If you only visit the website
My hosting provider records standard technical information automatically: your IP address, browser type, device type, the pages you visit, and the time of your visit. This is ordinary server log data and I do not use it to identify you.
If you submit a form or request the eBook
Your name, email address, and anything else you type into the form. Forms on this site are handled by Gravity Forms, and email addresses are passed to AWeber, which manages my email list.
If you apply to work with me or become a client
• Contact details — name, email, phone.
• What you tell me in your application about what you are working on.
• Health and history information you share with me before or during sessions, including medications, conditions, and care you are receiving from other providers.
• Brief written notes I keep to prepare and deliver your sessions, and the written summary I prepare after an Insight Consultation.
• Scheduling records and payment history.
• Messages you send me between sessions.
If you have access to the Inner Authority Method course
The course is hosted on this website. You will have an account with a username, an email address, and a password, and the system records your progress through the material. Occasionally I may deliver course materials by another means, such as a shared file link, where that is quicker for you.
Payment information
Payments are processed by Carepatron, using Stripe as its payment processor. I do not see, handle, or store your full card number. I see only the record that a payment was made.
3. How I use it
• To decide whether I am the right person to help you, and to tell you honestly if I am not.
• To prepare and deliver your sessions, including writing custom audio and session summaries.
• To schedule, invoice, and keep track of sessions used and remaining.
• To answer your messages and respond to enquiries.
• To send you the material you asked for, such as the free eBook.
• To meet legal, tax, and recordkeeping obligations.
I do not sell your information. I do not rent, trade, or share it with advertisers. I do not use what you tell me in session to target advertising to you.
4. Health information
The most sensitive information I hold is what you tell me about your health and your life. I treat it accordingly. Access is limited to me, and I do not discuss identifiable client information with anyone outside the circumstances described in section 7.
I am not a HIPAA covered entity.
I hold myself to those standards as a matter of practice: client records are kept in Carepatron, sessions are delivered over Zoom, and I have business associate agreements in place with those providers where offered.
Because I am not a licensed healthcare provider and do not bill insurance, the legal protections that attach to records held by a licensed therapist or physician may not apply in the same way to mine. I want you to understand that distinction rather than assume it.
5. Cookies and analytics
This website uses cookies — small files stored by your browser. Some are necessary for the site to work. If you leave a comment or log in, WordPress sets cookies to remember you. You can block or delete cookies through your browser settings, though parts of the site may not work properly if you do.
I do not use website analytics and I do not use advertising trackers or pixels. I do not track you across other websites, and nothing on this site reports your browsing to an advertising platform.
If this ever changes, I will update this policy and say so plainly before doing it.
6. Who else handles your information
I use a small number of service providers to run my practice. Each holds only what it needs, and each has its own privacy policy:
• WP Engine — website hosting.
• Gravity Forms — form submissions on this website.
• AWeber — email list management and marketing email.
• Carepatron — booking, client records, and the client portal where between-session messaging takes place.
• Stripe — card payments, as a subprocessor to Carepatron.
• Zoom — video sessions.
• Microsoft 365 — my email, jennifer@yestohypnosis.com.
• Hypnosis Motivation Institute — supervision and training records, as described below.
7. When I would share something:
I disclose what you have told me only in these situations:
• When you ask me to, or give me permission — for example, to coordinate with a provider on your care team.
• When I have reasonable suspicion of harm to you or to another person.
• When I am legally required to, such as by subpoena or court order.
• To the service providers listed above, to the extent needed to deliver the service.
Training and supervision records
As part of my hypnotherapy training and supervision, I log session records with the Hypnosis Motivation Institute. These records identify clients by initials and a case number only — no names, contact details, age, or location — and describe the techniques I used and my own reflections on the session. Session dates are recorded. If you would prefer that your sessions not be logged this way, tell me before we begin and we will discuss it.
8. How long I keep it
• Client notes and session records — seven years from the date of our last session, then securely deleted. This period reflects both record-keeping obligations and the timeframe in which questions about past work may arise.
• Form submissions and enquiries that do not lead to work together — twelve months.
• Email list details — until you unsubscribe, and then only what is needed to honor that request.
Where a client was under 18, records may be held longer, as the retention period can run from the age of majority rather than the date of the last session.
You may ask me to delete your information at any time, and I will do so unless I am legally required to keep it.
9. Security
I take reasonable steps to protect your information, including limiting access to me alone, using reputable providers, and storing client notes in a system designed for health information. No method of storage or transmission is completely secure, and I cannot guarantee absolute security.
Please use the Carepatron client portal for anything to do with your sessions. Text messages to my phone are for scheduling only. Text messaging is not a secure channel and is carried by my mobile provider, so please do not send health information or session details that way. Email is more secure than text but is still not the right place for sensitive detail.
10. Your choices
• You can ask me what information I hold about you, and I will tell you.
• You can ask me to correct anything that is wrong.
• You can ask me to delete your information, subject to any legal obligation to retain it.
• You can unsubscribe from marketing email at any time using the link in any such email. This will not affect anything you have purchased, and I will still send you emails about your bookings.
• You can decline to be recorded. I do not routinely record sessions, and I will always ask first.
11. Children
This website is not directed to children under 13, and I do not knowingly collect information from them. I work with clients under 18 only with the written consent of a parent or legal guardian, who provides the application information and agrees to my Terms of Service on the minor's behalf. If you believe a child has given me information without that consent, please contact me and I will delete it.
12. Where I work
I practice from Pennsylvania, United States, and my services are intended for clients in the United States. I may work with clients elsewhere where language and circumstances allow, but this website and my services are not directed to residents of the European Union or the United Kingdom, and I do not offer services specifically to them. If you are located outside the United States and wish to work with me, please contact me first.
13. Links to other sites
This site links to other websites, including Carepatron, my social media profiles, and stikora.com. I am not responsible for their privacy practices. Read their policies before giving them information.
14. Changes
I may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be announced on this page.
15. Contact
Questions about this policy, or requests about your information:


Jennifer Sexton, CCHt  
Hypnosis & Transformational Arts
Lancaster County, Pennsylvania  
yestohypnosis.com/contact
717-330-0751


Office hours: Monday through Friday, 9:00 am to 3:00 pm Eastern.