Privacy Policy
Emily J Hypnotherapy GDPR Notice
GDPR Regulations 2018
With the implementation of the General Data Protection Regulations (GDPR) in May 2018, replacing the Data Protection Act, the focus has been on ensuring the secure and private storage of personal, confidential, and sometimes sensitive data.
How long will you hold my information for?
I am registered as a student Solution Focused Hypnotherapist with the National Council for Hypnotherapy (NCH). As part of their professional and ethical requirements, I am required to keep client records for a period of eight years following our final session. These records are stored securely and are retained only for as long as necessary to meet these obligations.
What if I would like my data to be destroyed before this date?
Under GDPR rules, you have the right to request the deletion of any of your records at any time by submitting a request to me in writing. If such a request is made, all paper records will be securely destroyed using a cross-cut shredding machine. Any electronic data, including emails or text messages, will be permanently deleted from the devices on which they are stored. Please note that I am required to retain a record of your deletion request, but no other personal data would be kept.
Can I see or get a copy of the information you hold?
In accordance with GDPR, you have the right to access and obtain a copy of your information within 30 days. Please request the information you would like in writing.
What are your reasons for collecting this information?
I collect and store personal data to ensure I can provide hypnotherapy sessions that are safe, appropriate, and effective for you. This may include contact details, basic personal information, and relevant health or wellbeing information shared by you. This information is used to understand your needs, tailor sessions appropriately, maintain accurate records, and meet my professional, ethical, and legal obligations.
How do I know that you will store my information securely?
All personal information is stored securely and accessed only by me. Electronic records are held on a password-protected laptop that requires a username and password to access. My email account and mobile phone are also password-protected to prevent unauthorised access.
Are our discussions within the hypnotherapy sessions confidential?
Yes, confidentiality is maintained unless there is a need for supervision support or ifthere is a belief that you may harm yourself or others. I may consult with my supervisor to support best practice and ensure I am working effectively. Any such discussions would be anonymised, and no information that could identify you would be shared.
What if I see you outside of a hypnotherapy session?
If you see me outside of our sessions I will wait for you to approach or speak to me directly. I will not approach you to protect your confidentiality.
Will you discuss information about me with other health and social care
professionals?
Information will only be shared with other health and social care professionals with your written consent. The only exception to confidentiality would be if I believed there was a serious risk of harm to you or to others, in which case I may be required to share relevant information with appropriate authorities as part of my duty of care. Wherever possible, I would aim to discuss this with you before taking any action.
Who is the Data Controller, and what is their ICO registration number?
I am the data controller, and ICO registration is ZC050702.