GDPR Privacy Notice

GDPR Privacy Notice  

Hypnotherapy with Better Brain either face to face or and Online is confidential. 

I value your privacy and adhere to strict regulations to keep all personal information secure

In May 2018 the Data Protection Act was replaced by the General Data Protection Regulations (GDPR). The changes to the Data Protection Act are aimed at ensuring that your personal, confidential and sometimes sensitive data, is held privately and securely. 

How long will you hold my information for?  

Records will be kept for 8 years in line with NCH guidelines after which they will be destroyed or deleted. 

What if I would like my data to be destroyed before this date?  

Due to the sensitive nature of what we do, my insurance company does not allow the deletion of data, before the minimum time for holding said data. 

Am I able to see or get a copy of the information held by you?  

In line with GDPR, yes, within 30 days of a request. 

What are your Reasons for collecting this information?  

I collect your contact details such as your name, address, telephone number and email address. I collect this information for appointment reminders and rearrangements. 

Your contact details, address and doctors details will only be used with your explicit consent

I collect information about why you are using my service, a small amount of personal and  medical information, as well as notes from each of our sessions. 

This information enables me to provide a high quality service to you, ensuring I am equipped with the knowledge of our previous discussions prior to each session. 

How do I know that you will store my information securely?  

• Hard copy documents – Are all stored in a locked cabinet.
• Text messages – My mobile phone is secured with a pin code.
• Emails – My email account requires a user name and password.
• Electronic documents – Any electronic documents are stored on a password protected computer.

Are our discussions within the hypnotherapy sessions confidential?  

Yes, unless I need support from my supervisor (in which case details will be shared but anonymised) or if I believe that you are about to harm yourself of another or there are potential safeguarding issues (See Exceptions below) 

Exceptions:

In order to safeguard you and the people around you, if you were to disclose that you were going to carry out harm to yourself or someone else, then under my “Duty of Care” I am obligated by law to inform the relevant authorities. This is to support you to live well, and I would always aim to discuss this with you prior to contacting anyone.

What about other Health and Social Care Professionals?

As I adhere to the GDPR, any contact relating to you with other health care professionals would only be made with your signed consent. For example, if I were to write to your GP to notify them of your treatment with me, and then notify them of the treatment ending.

What if I see you outside of a hypnotherapy session?  

Outside of a hypnotherapy session I will not approach you. If you choose to approach me, we can have a normal everyday discussion but we will not discuss anything to do with the hypnotherapy sessions. This is to make sure that confidentiality is maintained. 

Who is the Data Controller and what is their ICO registration number? 

I (Andrew Golby) am the registered data controller. My ICO number is CSN9259377.