PRIVACY POLICY
What type of information I collect
Your name, address, email address, telephone number, contact details of GP, brief information about your lifestyle and basic information about important others in your life. Some notes about your issue, how it affects you, what you’d like to achieve from therapy, your treatment plan, therapy interventions used and the outcome of your therapy.
How the information is stored
Written notes are stored in a locked cabinet. Electronic notes are stored in an external hard drive which is kept in a locked box, all other electronic documents are stored in a password protected computer. My email account requires a username and password. Text messages will be deleted after reading or once relevant information has been noted elsewhere, for example, my appointment diary.
How I get personal information and why I have it
Most of the information I process is provided to me directly by you for one of the following reasons:
In order for me to contact you
In order for me to identify you
In order for me to ascertain your issue and work out a personalised therapy plan
In order for me to assess any differences in your issue
In order for me to learn from therapy sessions and improve my practice
I use information you have given me in order to:
Plan and organise your treatment in a way that suits your individual needs and enables me to learn as a therapist and thus provide the best service I can to my clients.
I may share this information with:
Your GP or another medical professional with your explicit consent.
My Supervisor or Peer Group, all of whom comply with GDPR guidelines, however, you will retain your anonymity throughout discussions.
*Confidentiality will be maintained in all areas but the most exceptional circumstances, such as criminal or civic court cases where a court order is made demanding disclosure or where it is believed that there is a serious or immediate risk of harm to yourself or others. Such situations are taken very seriously and will be handled with the utmost care and consideration, following the ethical guidelines sand legal requirements governing the practice.
Under the UK General Data Protection Regulation (UK GDPR), The lawful basis we rely on for processing this information are:
Your consent
You are able to remove your consent at any time. You can do this by contacting me at carol@hypnotherapyukonline.com .
I have a contractual obligation. I have a legal obligation. I have a vital interest. I have legitimate interest.
Your data protection rights
Under data protection law, you have rights including:
Your right to access
You have the right to ask for copies of personal information.
Your right to rectification
You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
Your right to erasure
You have the right to ask me to erase your personal information in certain circumstances.
Your right to restriction of processing
You have the right to ask me to restrict the processing of information in certain circumstances.
Your right to object to processing
You have the right to object to the processing of your personal information in certain circumstances.
The right to data portability
You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.
Please contact me at: carol@hypnotherapyukonline.com, 07823486334.
You have the right to ask that I transfer the personal information you gave me to another organisation, or to you in certain circumstances.