GDPR Policy
​
How will my data be stored?
In May 2018 the Data Protection Act was replaced by the General Data Protection Regulations (GDPR). The changes to the Data Protection Act are aimed at ensuring that your personal, confidential and sometimes sensitive data, is held privately and securely.
​
How long will you hold my information for?
I am a member of the National Council of Hypnotherapy (NCH) and will follow their guidance which is to keep written records stored securely for: 8 years after the last interaction with an adult client; up to the age of 25 for a child under 16 when last seen; 26 years for 17-18 year olds.
​
What if I would like my data to be destroyed before this date?
Due to the sensitive nature of what I do, my insurance company does not allow the deletion of data, before the minimum time for holding said data. However, you can request that any identifying data is removed.
​
Am I able to see or get a copy of the information held by you?
In line with GDPR, yes, within 30 days.
​
What are your Reasons for collecting this information?
Some information will be gathered to allow me to provide continuity within our sessions, in order to help you to reach your goal. It will allow me to refer to the content of earlier sessions and previous discussions. I will only use your contact details/address and GP’s details with your explicit consent except in the case of*.
​
How do I know that you will store my information securely?
I will store your information digitally in encrypted files. Any written notes will be uploaded at the end of each session and destroyed safely and securely.
​
*Are our discussions within the hypnotherapy sessions confidential?
Yes, unless I need support from my supervisor or I believe that you are about to harm yourself or another.
​
What if I see you outside of a hypnotherapy session?
I am obliged to protect your confidentiality at all times. So, for this reason, anyone who I meet purely for the purposes of hypnotherapy, although I will acknowledge you, it would be ideal if any further conversation could be avoided. However, if you wish to discuss your therapy with other people, that is your choice and you are very welcome to do so.
​
Will you discuss information about me with other health and social care professionals?
Only with your written consent.
​
Who is the Data Controller and what is their ICO registration number?
I am the data controller and I am registered with the Information Commissioners Office (ICO) under registration no. ZB614587.
Last updated 5th June 2024