LICKEY HILLS HYPNOTHERAPY FOR WOMEN

Deborah Glover
Registered Clinical Hypnotherapist
lickeyhillshypnotherapy@gmail.com
Tel:  07866 564 724

PRIVACY STATEMENT
---------------------------------------------------------------------------------------------------

This privacy statement describes how Lickey Hills Hypnotherapy for Women protects and makes use of the information you provide, in compliance with current data protection laws.  If you provide, or are asked to provide, information when contacting Lickey Hills Hypnotherapy, it will only be used in the ways described in this privacy statement.
This statement is updated from time to time.  This latest version was updated on 3rd January 2020.  If you have any questions about this policy, please email lickeyhillshypnotherapy@gmail.com.

What personal information will be collected by Lickey Hills Hypnotherapy?
*  Your name, address, telephone number,email address, date of birth and GP name and practice.  Please note:  Should any personal data be subject to change (e.g.  if you move house, change GPs, change your name etc.) during your active involvement with Lickey Hills Hypnotherapy, you should notify the hypnotherapist at the earliest convenience, so that your records are kept up to date.
*  The hypnotherapist will keep written notes of any one-to-one sessions (including telephone, video-call or face-to-face sessions) with you.  These notes will contain a significant amount of personal data relevant to your well-being, concerns and development, over the course of hypnotherapy.  You shall also be asked to give your verbal or written consent.
*  At times, the hypnotherapist may also have written emails or messages sent by you.
*  In some circumstances, you  may be asked to complete questionnaires related to your difficulties and well-being.
*  Occasionally, the hypnotherapist might record sessions (group or one-to-one) when your voice may be present on the recordings.  No video recording will ever be used.  The hypnotherapist shall inform you if or when any audio recording is taking place.  

Why is this data being collected?
*  Your name, address, telephone number and email address is collected so that the hypnotherapist can make contact with you for the duration of your involvement with Lickey Hills Hypnotherapy.
*  Your date of birth and GP details are collected, as the hypnotherapist has a duty of care as a health professional to contact your GP or relevant third party professionals (without consent should an emergency arise)  1) if you are taken ill during a session and require urgent  medical care, and 2)  if it is felt that you may require additional support from your GP or relevant third party professional, because of concern  about you being at risk of harm in some way, or potentially pose a risk of harming another person.   If the therapist feels that contacting your GP, another professional, the Police or any other emergency service is necessary,  then all possible efforts shall be made to involve you in this decision.  
*  Notes are  kept following one-to-one  sessions, to allow the hypnotherapist to deliver their services effectively, allowing a continuity of care between sessions and as a way to record progress towards your goals. 
*  In the case of young people under the age of eighteen, Lickey Hills Hypnotherapy shall share information held about the young person, with their parent or legal guardian, with regard to their well-being, concerns or development over the course of hypnotherapy.  If the hypnotherapist finds it necessary, as a duty of care, to contact the young person's GP (or any other appropriate third party professional), their parent or legal guardian shall be informed. 
*  Written emails are stored to serve as a reminder to the therapist of any previous conversations had between yourself and the hypnotherapist, which may be relevant to future contact.
*  Questionnaires are completed to assess your well-being and guide the hypnotherapist's work with you.  They are also used to monitor change in your well-being over time (e.g.  between the start and end of your course of sessions).  Occasionally, you may also be asked to  complete questionnaires to give your feedback on the services you have received.  This information may be used to guide future improvements to how Lickey Hills Hypnotherapy delivers it's services.
*  You may be asked to provide a written testimonial for the purposes of marketing.  This shall only ever be used with your explicit consent and no personal data shall ever be disclosed.
*  Audio recordings may occasionally be collected to allow the hypnotherapist to take examples of their work to supervision (this involves the hypnotherapist discussing their therapeutic techniques with another trained professional), in order to improve their skills.  Your personally identifiable information shall not be discussed during this supervision (i.e.  the supervising professional will not be told your name, address, telephone number, email address, date of birth or GP details and shall not be shown any detailed notes made by the hypnotherapist relating to one-to-one sessions.

How will your data be stored?
*  Any personal information held about you is stored and processed in line with The Data Protection Act 1998 (in force on the date that this statement became operational) and the General Data Protection Regulation (Regulation (EU) 2016/679) adopted on 27th April 2016 and enforceable from 25th May 2018.
*  All data will be stored for a minimum of seven years (and a maximum of ten years) following the end of your active involvement with Lickey Hills Hypnotherapy.  Lickey Hills Hypnotherapy has the right to retain your data for this period so that it can respond effectively to any questions or complaints that may be later raised by you and/or your representatives.
*  All electronic data will be stored on a password protected computer in a locked building.
*  All paper-based data shall be stored in a locked cabinet, in a locked building.
*  Any audio recordings will be stored on a password protected computer in a locked building.
*  All email conversations will be stored on-line in a password protected email account.
*  In the unlikely event of a data breach, we will notify the Information Commissioner's Office (ICO) so that their procedures can be followed.  We will also notify all individuals whose data may have been accessed to alert them to the breach and any potential risks.

Do you need to give consent for your data to be stored by Lickey Hills Hypnotherapy?
*  Lickey hills Hypnotherapy does not legally require your consent to store the data listed above and to process this data in the ways described in this statement.
*  While you are actively using the services of Lickey Hills Hypnotherapy, your consent to being contacted about these services is assumed.
*  Whilst your contact details may be held for the purpose of receiving updates about future services, your data shall never be passed on to any third-party company for the purposes of marketing.

Disclosure of data
* Every effort shall be made by Lickey Hills Hypnotherapy to keep your data confidential.  However, in certain circumstances the Data Protection Act allows Lickey Hills Hypnotherapy to disclose data (including sensitive data) without the data subject's consent (e.g.  as part of any legal proceedings or if there is a concern about any member of the public being at risk of harm). 
*  Emergency or life-threatening situations may warrant the sharing of relevant information held by Lickey Hills Hypnotherapy with the relevant emergency services, without consent.
* If your data is disclosed, then Lickey Hills Hypnotherapy will take all reasonable steps to notify you about the disclosure and will also ensure that any data request from a third party is legitimate, reasonable and necessary.

Your rights
*  You have the right to:
1)  ask what information the company holds about you and why.
2)  ask how to gain access to information held about you.
3)  be informed how to keep your information up to date.
4)  ask for your data to be destroyed after the retention period of 7 years, but not before then.
5)  be informed how the company is meeting it's data protection obligations.
*  You have the right to request access to any personally identifiable data stored by Lickey Hills Hypnotherapy without giving a reason.  If you would like to request a copy of the data held about you, this is called a subject access request.  Subject access requests should be  made in writing on email to lickeyhillshypnotherapy@gmail.com.  Lickey Hills Hypnotherapy  shall aim to provide the relevant data within 30 days and will always verify the identity of anyone making a subject access request before handing over  information.