General Data Protection (GDPR)

Introduction to Data Protection

As a hypnotherapist, I am committed to protecting your personal data and ensuring your privacy is respected. The purpose of this section is to explain how your personal information will be collected, used, stored, and protected in accordance with the General Data Protection Regulation (GDPR) and other relevant privacy laws.

Types of Data Collected

During the course of our therapeutic relationship, I may collect and process the following types of personal data:

Personal Identification Details: Name, date of birth, contact details (email, phone number), and emergency contact information.
Health and Medical Information: Information related to your health, including medical history, current conditions, medications, or any mental health concerns you share with me that are relevant to your treatment.
Session Records: Notes from therapy sessions, treatment plans, progress reports, and feedback you provide regarding your experience.
Communication Records: Emails, phone calls, or text messages sent between you and me regarding appointments, treatments, and follow-up.

Purpose of Data Collection

Your personal data will be collected and processed for the following purposes:

To provide you with hypnotherapy services tailored to your individual needs.
To communicate with you regarding appointments, treatments, and any necessary updates.
To document and track your progress through therapy, so we can adapt the treatment plan to better suit your evolving needs.
To comply with legal obligations, including the keeping of treatment records as required by professional standards and regulations.

Data Storage and Security

Your personal information will be securely stored, with access restricted to only those who need it to provide the services you’ve requested.

Measures include:

Encrypted cloud storage for electronic records.
Paper records will be digitised/ scanned to be protected primarily on an encrypted cloud, and the paper copies kept for a minimum of 7 years.
Access controls and two factor authentication to ensure only authorised personnel (if applicable in my Therapists Will) or myself can access sensitive information.

Sharing of Your Data

Your data will not be shared with any third parties without your consent. There may be situations where sharing your information is necessary, including:

Professional supervision: If necessary, anonymized data may be shared for the purposes of supervision or peer review.
Emergency situations: If I believe that you are at risk or in danger, I may need to share relevant information with appropriate emergency services or healthcare providers.
Legal obligations: If required by law, I may have to disclose your personal data (e.g., in response to a legal request or in the event of a legal claim).

Retention of Your Data

Your personal data will be retained for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Once it is no longer needed:

Data will be securely disposed of: Physical records will be shredded, and electronic data will be deleted using secure methods.
Retention periods: Hypnotherapy records are typically kept for a minimum of 5 years, in line with legal and professional guidelines.

Your Rights Regarding Your Data

Under the GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data I hold about you.
Right to Rectification: You can ask for any incorrect or incomplete information to be corrected.
Right to Erasure: You can request the deletion of your personal data, subject to legal obligations and record-keeping requirements.
Right to Restrict Processing: You can request the limitation of how your data is used, under certain conditions.
Right to Object: You have the right to object to the processing of your data in some circumstances, including direct marketing.
Right to Data Portability: You can request to receive your data in a structured, commonly used format to transfer it to another provider.

Consent and Withdrawal of Consent

By agreeing to these terms and conditions, you are providing consent for the collection, processing, and storage of your personal data as outlined in this document. If you wish to withdraw consent at any time, please contact me directly, and I will take the necessary steps to stop using your personal data for the purposes outlined here.

Contact Information

Your privacy is of the utmost importance, and I am committed to ensuring that your personal data is handled securely and respectfully. By sharing your information with me, you are trusting me to provide professional, confidential, and ethical hypnotherapy services.

If you have any questions or concerns regarding the handling of your personal data or if you wish to exercise any of your rights as mentioned above, please contact me at:

reeves.rewired@gmail.com