Privacy Policy
How will my data be stored?
From May 2018 the Data Protection Act was replaced by the General Data Protection Regulations (GDPR). The changes to the General Protection Act are aimed at ensuring that your personal confidential and sometimes sensitive date is held privately and securely.
How long will you hold onto my information for?
It is a requirement of holistic insurance that client consultation records are taken and retained for a period of five years. Furthermore, when working with minors, the records should be kept for five years after the minor’s 18th birthday.
The records should as a minimum have the client’s full name, date of consultation and notes on the lifestyle/medical history where appropriate to the treatment being given.
It should include a brief description of the therapy or treatment.
What if I would like to have my data destroyed before this date?
Under GDPR rules, you are able to request the deletion of your records at any time.
Am I able to see or get a copy of the information held by you?
In line with GDPR, yes, within 30 days. In this case, I would contact my insurance company and if they agreed to it, all your paper records would be shredded with a cross-shredding machine and any electronic data such as emails or text messages would be permanently deleted from the devices they are stored on. I would have to save the request for deletion that you made but would not save any other data.
What are your reasons for collecting this data?
I collect information about why you are using the service, a small amount of medical information and a small amount of information about your lifestyle and significant others, (family, friends etc.) alongside brief session notes. This information enables me to provide a high-quality service to you, ensuring I am equipped with the knowledge of our previous discussions before each session. Your contact details/address and doctor details will only be used with your explicit consent or under extreme circumstances threatening your safety or the safety of others. See the Terms and Conditions form (supplied at the time of consultation).
How will you store my information securely?
Hardcopy documents are all stored in a locked cabinet in a locked, private building.
Text messages, my mobile phone is secured with a PIN code and face ID.
Emails, my email account requires a username and password. All emails held by me will be deleted when the content is no longer needed, i.e., has been acted upon or therapy has ended.
Email attachments, any attachments sent by email to you containing sensitive information would be password protected and the password would be sent to you via text message.
Electronic documents, any electronic documents e.g. A letter to your GP, or an invoice, are password-protected and stored on a password-protected computer if they contain personal or sensitive information.
Are hypnotherapy sessions confidential?
Everything we talk about during our sessions is strictly confidential between you and me. To ensure I am doing my job effectively and that I have the right support, I may discuss elements of our sessions with my supervisor*. During these discussions, I do not disclose any details that may identify you to my supervisor, and my supervisor also adheres to the GDPR.
*supervisors are specially trained hypnotherapists with whom therapists can discuss client issues if they wish but are not obliged to do so. No names or information that would identify a client would be disclosed.
What if I see you outside of a session?
To ensure your confidentiality, if we see each other socially, or outside of our sessions I will not engage in any conversation regarding your therapy. You are welcome to talk with other people about the therapy you are receiving, but I am obligated by GDPR law to ensure that your confidentiality is protected.
Will you discuss information about me with other health and social care professionals?
Only with your written consent.
With the exception, In order to safeguard you and the people around you, if you were to disclose that you were going to carry out harm to yourself or someone else, then under my “Duty of Care” I am obligated by law to inform the relevant authorities. I would always aim to discuss this with you prior to contacting anyone.
If I was issued with a police warrant or court order for information about you, by law I would also have to provide them with the information.