General Data Protection Regulations, 2018 (GDPR) Privacy Policy

WHAT IS THE GDPR (GENERAL DATA PROTECTION REGULATIONS, 2018) AND HOW DOES IT AFFECT ME?
The GDPR replaces the 1998 Data Protection Act to ensure that your personal and sensitive, confidential data is kept private and held securely, being processed in the way that we have agreed. It is there to protect your rights as a consumer of a service that might involve your identifiable data, e.g. your name and address or whether you have a specific condition. It also covers any session records, text messages or emails we might exchange. 

​

HOW LONG WILL YOU HOLD MY INFORMATION FOR?
I am regulated by the CNHC, an organisation that stipulates I must hold your data for 8 years after your final session, unless you are a child, in which case I must hold your data until your 25th birthday, or unless you are 17 when treatment ends and then I must keep it until your 26th birthday. Therefore, all records will be deleted in the January after the above retention scales. This is in line with NHS regulations for holding data.

​

WHY DO YOU NEED TO RECORD THIS INFORMATION?
I collect information about why you are using the service, a small amount of medical information and a small amount of information about your lifestyle and significant others, (family, friends etc.) alongside brief session notes. This information enables me to provide a high quality service to you, ensuring I am equipped with the knowledge of our previous discussions prior to each session. Your contact details / address and Doctors details will only be used with your explicit consent or under extreme circumstances threatening your safety or the safety of others. 

​

WHAT PROVISION IS MADE TO ENSURE MY INFORMATION IS HELD SECURELY?
- Documents: Hardcopy documents are all stored in a locked cabinet in a locked, private building.
- Text messages: My mobile phone is secured with a pin code.
- Emails: My email account requires a user name and password. All emails held by me will be deleted when the content is no longer needed, i.e. has been acted upon or therapy has ended.
- Email attachments: Any attachments sent by email to you containing personal, sensitive information would be password protected and the password would be sent to you via text message.
- Electronic documents: Any electronic documents e.g.  are password protected and stored on a password protected computer if they contain personal or sensitive information.

IS WHAT WE DISCUSS KEPT CONFIDENTIAL?
Everything we talk about during our sessions is strictly confidential between you and me.  

​

WHAT IF I SEE YOU OUTSIDE OF THE SESSION?
To ensure your confidentiality, if we see each other socially, or outside of our sessions I will not engage in any conversation regarding your therapy. You are welcome to talk with other people about the therapy you are receiving, but I am obligated by GDPR law to ensure that your confidentiality is protected.

​

WHAT IF I DON’T WANT MY RECORDS TO BE HELD FOR THAT LONG?
Under the GDPR you can make a request in writing to me, for all your records to be deleted. In this case I would contact my insurance company and if they agreed to it, all your paper records would be destroyed and any electronic data such as emails or text messages would be permanently deleted from the devices they are stored on. I would have to save the request for deletion that you made but would not save any other data.

​

WHAT HAPPENS TO MY INFORMATION IF ANYTHING HAPPENS TO YOU, THE THERAPIST SO YOU CANNOT CONTINUE WITH MY TREATMENT?
In the event of the therapist being incapable of continuing with your treatment, e.g. because of illness or death, you will be contacted by a trusted person who will also respect rules of confidentiality. 

​

WHAT HAPPENS IF YOU, THE THERAPIST, ARE TEMPORARILY INCAPACITATED SO YOU CANNOT KEEP AN APPOINTMENT?
If possible, I will contact you myself, otherwise a trusted relative (spouse) will inform you.

​

WHAT ABOUT PASSING ON INFORMATION TO OTHER HEALTH AND SOCIAL CARE PROFESSIONALS?
As I adhere to the GDPR, any contact, relating to you, with other health care professionals would only be made with your signed consent. This would only happen if it seemed that it would be particularly beneficial to you or if I need verification that Hypnotherapy is suitable for you. I would only do this if you were to sign the specific consent for this at the time, if such a decision is made.

 

Exceptions:
In order to safeguard you and the people around you, if you were to disclose that you were going to carry out harm to yourself or someone else, then under my “Duty of Care” I am obligated by law to inform the relevant authorities. I would always aim to discuss this with you prior to contacting anyone.

If I was issued with a police warrant or court order for information about you, by law I would also have to provide them with the information.

 

When you trust me with your personal information, I take my responsibility to protect it very seriously. I respect your privacy and your rights to control your personal information. With that in mind, I want to be clear about the information I collect and why.

​

The main purpose of collecting your information is to provide you with the services offered on my website, No matter how you use my site, I want to help you to use it as effortlessly as possible.

​

I will not sell your personal information to third parties.

​

This privacy notice explains how I will gather and use your personal information. It’s relevant to you if you use my services, as a hypnotherapy professional.

​

Please read this privacy notice carefully and make sure you understand it. You are considered to have accepted this privacy notice when you first use this site. If you do not agree with and accept it you must stop using this site immediately.

​

This site may contain links to other websites that are not covered by this privacy notice. You should check the other party's privacy notice to make sure you understand how they collect and use your information.