Privacy Policy

How will my data be stored?

In May 2018 the Data Protection Act was replaced by the General Data Protection Regulations (GDPR). The changes to the Data Protection Act are aimed at ensuring that your personal, confidential and sometimes sensitive data, is held privately and securely.

How long will you hold my information for?

The National Council for Hypnotherapy (NCH) states that “You should keep written records stored securely for 8 years after the last interaction with an adult client and up to the age of 25 for a child under 16 when last seen or 26yrs for 17-18 year old”. I intend to follow this advice.

What if I would like my data to be destroyed before this date?

Due to the sensitive nature of what we do, my insurance company does not allow the deletion of data before the minimum time for holding said data.

Am I able to see or get a copy of the information held by you?

Yes. In line with GDPR you will get this within 30 days of your request.

What are the reasons for collecting this information?

Collecting information about you helps me to get to know you better, informs me about any conditions you may be experiencing and enables me to provide a more accurate and bespoke service for you so that you get the most out of your sessions.

How do I know that you will store my information securely?

All information obtained from you will be either typed or handwritten and then scanned and secured on my computer in my dedicated Hypnotherapy file, which is password protected and used and accessed only by myself. Written notes will be shredded after they have been scanned.

Are our discussions within the hypnotherapy sessions confidential?

Our sessions are entirely confidential. Unless I believe that there is a risk of harm to yourself or another. I may also discuss your case with my supervisor if I need support to ensure that you are receiving the best service that I can provide. My supervisor is also bound by GDPR regulations.

What if I see you in public, outside of a hypnotherapy session?

Keeping in line with GDPR, I would never approach you, however if you would like to stop and say hi, that is fine.

Will you discuss information about me with other health and social care professionals?

Online with your written consent and if this was felt to be in your best interests.

Who is the Data Controller and what is their ICO registration number?

I will be the data controller and my ICO number is ZB890774.