Tuesday, 22 May 2018

GDPR Policy.






General Data Protection Regulation Statement

The General Data Protection Regulation (GDPR) is concerned with personal data that I collect, store, and share. Please read this document to understand my procedures.
Personal Information I may collect:
Name. Age. Address. Email. Telephone number. Occupation. Relationships & Progeny. History. Relevant medication and conditions. Difficulties. Hobbies & interests. Session notes.

How I will store your personal information:
Paper: Written notes (described below). Stored securely within premises secured at night.
Smartphone: I may store your contact information on my smartphone as this allows me to contact you in case of emergencies. This phone is password protected.
Email/SMS: Your email address and correspondence will be stored in my Gmail account. Your telephone number may be stored in my SMS should we exchange messages this way. Electronic correspondence will also be held by the corresponding app (Gmail, Phone SMS, Dropbox). Please refrain for sending sensitive information via email.
Website: None of your personal information is stored on my website, other than to momentarily collect & send it to my Gmail account for the purposes of our initial contact.

Documents held:
Paper - Initial consultation / contact sheet.  Session notes/log report.
Electronic - Name. Email address. Telephone number

How I may process / share your information:
I will not disclose client information to third parties unless legally bound to do so. Data collected by me is used solely to enhance our work, to contact you in relation to appointments / enquiries or to forward material such as MP3’s.
CORP Progress software. Used to track the effectiveness of your therapy, this information is collated and shared annually to monitor the effectiveness of Hypnotherapy. This software contains only anonymous information.
Supervision. As a registered Hypnotherapist I attend monthly consultations with another therapists. Cases are discussed anonymously.
Therapeutic Will. Access to your name and contact details will be shared with my Therapeutic Executor, so that you will be contacted on the event of my death or illness, should you still be in therapy with me.
Emergencies. If your health is in jeopardy (provided I have your consent) I may share your contact information with your Doctor or Mental Health Crisis Team. If I have become aware of your intent to cause harm to another person/organisation (e.g. terrorism), the law may require that I inform an authority without seeking your permission.

Your Rights:
To be informed what information I hold (i.e. this document). To rectify any inaccurate or incomplete personal information. To see the information I hold about you (free of charge for the initial request). To withdraw consent to me using your personal information. To request your personal information be erased (though I can decline whilst the information is needed for me to practice lawfully & competently).