Privacy Policy
Our contact details
Phone Number:07525172794
E-mail: if you have any concerns about our use of your personal information, you can make a complaint to:
christine@eatonhypnotherapy.com
ICO reference number: ZB279530
Privacy Policy
General Data Protection Regulations, 2018 (GDPR) and how it affects me.
​
After 20 years, the Data Protection Act has been replaced by the GDPR. The aim is to ensure that your personal, sometimes sensitive, confidential data is held privately and securely, being processed in the way that you have agreed to. It exists to protect your rights as a consumer involving your identifiable data.
​
The type of personal information we collect
We currently collect and process the following information:
​
-
your name, address and contact details
-
the reason you might have for visiting me
-
your consent form
-
session records
-
text messages or emails between us
​
How we get the personal information and why we have it
The personal information we process is provided to us directly by you for the following reasons:
In order to give you the highest quality support I can, I collect information about: what you want to achieve by coming for hypnotherapy, a small amount of medical information and information about you, alongside brief session notes. This allows me to refer to information about previous discussions and the content of earlier sessions, informing and developing your future sessions. Your contact details/address and GP’s details will only be used with your explicit consent.
​
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information is your consent. You are able to remove your consent at any time. You can do this by contacting
christine@eatonhypnotherapy.com.
​
How long will we hold your information for
As a member of the CNHC I am bound by their regulations regarding the length of time your information must be held. This organisation stipulates that I must hold your data for 8 years after your final session. The exception to this rule applies to children, for whom I must hold their data until their 25th birthday, (unless they are 17 when treatment ends when I must keep it until their 26th birthday). All records will be deleted in the January after the above retention periods. This is in line with NHS regulations for holding data. All your paper records would be shredded with a cross shredding machine. Any electronic data such as emails or text messages would be permanently deleted from the devices they are stored on.
​
Can I ask for my information to be deleted before this date?
GDPR allows you to request the deletion of any of your records, by making a request in writing to
christine@eatonhypnotherapy.com. Should you request this then all your paper records would be shredded with a cross shredding machine. Any electronic data such as emails or text messages would be permanently deleted from the devices they are stored on. Please note that I would have to save the deletion request you made but would not save any other data. It is possible that my insurance company’s legal team may want to verify information I send out.
​
How we store your personal information
Your information is securely stored.
-
Paper session notes – are all stored in locked cabinets.
-
Text messages – my work phone is secured with fingerprint recognition.
-
Emails – my email account requires a username and password.
Do our discussions during the sessions remain
confidential?
Everything we discuss during our sessions remains strictly confidential between you and me. On occasion I may choose to discuss elements of our sessions with my supervisor to ensure I am doing my job effectively. During these discussions I will not disclose any identifying details about you to my supervisor. My supervisor also adheres to GDPR.
​
What if I see you away from a hypnotherapy session?
I am obligated by GDPR to protect your confidentiality, so for this reason, although I will acknowledge you, it would be better to avoid any further conversation. However, if you wish to discuss your therapy with other people, you are of course, welcome to do so.
​
Will you discuss me with other Health and Social Care Professionals?
I am only able to contact other health and social care professionals with your written consent. Should I write to your GP, to notify them that you have come to see me for treatment and again at the end of the therapeutic relationship, I would require your signature in line with GDPR requirements. The only exceptions to this would be if I believed that you were about to harm yourself or another. Under those circumstances I would be required to inform the relevant authorities as part of my “Duty of Care”. However, I would always aim to discuss this with you before taking any action. Legally, I would also have to provide the police with information as set out in a warrant or court order, should the situation arise.
​
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask for copies of your personal information.
​
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
​
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
​
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
​
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
​
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
​
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
​
Please contact us at you have any concerns about our use of your personal information, you can make a complaint to us at christine@eatonhypnotherapy.com. or via 07525172794 if you wish to make a request.
​
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at christine@eatonhypnotherapy.com
​
You can also complain to the ICO if you are unhappy with how we have used your data.
​
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
​
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk