.png)
GDPR Policy
FREQUENTLY ASKED QUESTIONS REGARDING CONFIDENTIALITY
How is my information protected?
The General Data Protection Regulation (GDPR) replaces the 1998 Data Protection Act to ensure your personal and sensitive, confidential data is kept private and held securely, being processed in the way that you have agreed to. It is there to protect your rights as a consumer of a service or product that might involve your identifiable data, e.g. your name and address or whether you have a specific condition. It also covers any session records, text messages or emails we exchange.
How long will you hold my information for?
I am regulated by the NCH, an organisation that stipulates I must hold your data for 8 years after the last interaction with an adult client. The exception to this rule applies to children, for whom I must hold their data until their 25th birthday, (unless they are 17 when treatment ends when I must keep it until their 26th birthday). All records will be deleted in January after the above retention scales. This is in line with NHS regulations for holding data.
What if I would like my data to be destroyed before this date?
Due to the sensitive nature of what we do, my insurance company does not allow the deletion of data, before the minimum time for holding said data.
Am I able to see or get a copy of the information held by you?
You have the right to request access to any information I hold about you, and I will respond within 30 days of your request. If you wish, you can also ask for a copy of your personal data. Please note that in some cases, my insurance provider’s legal team may need to review and verify any information before it is shared.
What are your reasons for collecting this information?
To provide you with the highest quality support, I collect information about your reasons for seeking hypnotherapy, a small amount of relevant medical information, and limited details about significant people in your life, along with brief notes from each session. This helps me stay informed and maintain continuity across our work together. Your contact information, address, and GP details will only be used with your explicit consent.
How do I know that you will store my information securely?
-
Hardcopy documents – Are all stored in a locked cabinet in a locked room.
-
Text messages – My work phone is secured with a pin code.
-
Emails – My email account requires a username and password.
-
Electronic documents – Any electronic documents e.g. A letter to your GP, or an invoice, are password protected and stored on a password protected computer if they contain personal or sensitive information.
​
Are our discussions within the hypnotherapy sessions confidential?
Everything we discuss in our sessions is treated as strictly confidential. At times, I may share aspects of our work with my professional supervisor to support the quality and effectiveness of my practice. These discussions are conducted without revealing any identifying information about you. My supervisor is also bound by GDPR and confidentiality requirements.
Will you discuss information about me with other health and social care professionals?
I can only contact other health or social care professionals with your written consent. The only exceptions to this would be if I had serious concerns that you may be at risk of harming yourself or someone else. In such cases, I am legally and ethically required to inform the appropriate authorities as part of my Duty of Care. Wherever possible, I would discuss this with you before taking any action. I am also legally obliged to share information with the police if required to do so under a warrant or court order.
What if I see you outside of a hypnotherapy session?
If we happen to see each other outside of our sessions, I may acknowledge you with a smile, but I won’t initiate conversation. This is to protect your privacy and maintain confidentiality. You are, of course, free to speak openly about your therapy if you choose, but I am bound by GDPR regulations to safeguard your confidentiality at all times.