Privacy Policy

I am committed to ensuring that your privacy is protected and this privacy notice tells you what personal information I hold and why, and what your rights are. It sets out how I collect, use and protect any personal data you provide to me via email, sms, telephone and consultation forms in relation to Solution-Focused Hypnotherapy sessions.

When you book an appointment on my website, you will be prompted to read this privacy statement and by the act of clicking OK you are giving me informed consent to use your personal information as listed below and fully understand your rights under the GDPR.

How to contact me:

Jane McPhillips

0775 612 9226

jmcphillipshypnotherapy@outlook.com

Data Controller: Jane McPhillips (registered with the ICO under reference: ZB016010)

This privacy policy is effective as of 13th March 2021.

Confidentiality

Your therapy and personal information are kept securely. Information but not names will be shared with my supervisor who is also AfSFH and NCH accredited and who regularly reviews my practice. Confidentiality will be broken if I have concerns that you or anyone else is at risk. If this occurs it will be discussed in the session and recommendations will be discussed and documented in your notes.

As a fully accredited member of the AfSFH and NCH, I adhere to their ethical framework and guidelines to ensure that you receive a professional and quality service.

Information we collect about you and how we use it

Upon starting therapy, basic personal information will be collected for contact and identification reasons. During our therapy meetings, an assessment of your psychological health will be completed, and notes will be taken during sessions. These will include personal and sensitive details about your life. The assessment and notes are used solely for the delivery of a therapy service to you. 

Your rights

You have rights relating to the information I hold to verify the accuracy or to ask for them to be supplemented, deleted, updated or corrected.  You have the right to request a copy of the information that I hold about you. If you would like a copy of some or all of your personal information, please email or write to me via the contact details stated in this agreement. Information will be provided to you within 30 days.

We want to make sure that your information is accurate and up to date. You may ask me to correct or remove information you think is inaccurate. You have a right to request the transfer of your data to another individual or company.

How long we keep your information for - data retention

Your information is kept for the time necessary to provide the therapy service requested, however outside of this I will hold your details and session notes for a period of 8 years following the end of treatment to comply with legal obligations that are placed upon me by my insurers. In the case of a child under 13 then records will be kept 8 years after they reach the age of 25.  After this date, all data will be securely deleted.

Sharing of data

There may be times where your information needs to be shared with 3rd parties. I will explicitly ask your consent before doing so, and the data will be sent to 3rd parties securely.

Security of your data

Information will be kept securely and confidentially in line with the data retention policy as stated above.

If you get in touch with me via email, sms or telephone to make a booking I will retain your contact details in order to contact you and handle bookings.

Lawful basis for processing your information

The lawful basis for my holding and using your information is in relation to the delivery of a contract to you as a health care professional.  As an accredited member of Association for Solution-Focused Hypnotherapists I operate under a strict code of confidentiality. 

Email: I use Outlook powered by Microsoft the Office 365 service is GDPR compliant, and they provide tools for their customers to be GDPR compliant.

Website: My website is provided by Squarespace (including it’s bookings & payment processor via Acuity) which is based outside the UK. However Squarespace is also committed to complying with GDPR privacy laws and you can read their privacy policy here.

I will contact you using the contact preferences you give me in relation to:

Appointment times

Hypnotherapy information or information related to your health

Newsletters and promotions (you may unsubscribe from this at any time)

Your Rights

GDPR gives you the following rights:

- The right to be informed

- To know how your information will be held and used (this notice)

- The right of access

- To see your therapist’s records of your personal information, so you know what is held about you and can verify it

- The right to rectification

- To tell your therapist to make changes to your personal information if it is incorrect or incomplete

- The right to erasure (also called “the right to be forgotten”)

- For you to request your therapist to erase any information they hold about you

- The right to restrict processing of personal data

- You have the right to request limits on how your therapist uses your personal information

- The right to data portability: under certain circumstances you can request a copy of personal information held electronically so you can reuse it in other systems

- The right to object

- To be able to tell your therapist you don’t want them to use certain parts of your information, or only to use it for certain purposes

- Rights in relation to automated decision-making and profiling

- The right to lodge a complaint with the Information Commissioner’s Office

- To be able to complain to the ICO if you feel your details are not correct, if they are not being used in a way that you have given permission for, or if they are being stored when they don’t have to be

Full details of your rights can be found on the ICO’s website.

If you wish to exercise any of these rights, please use the contact details given above.

If you are dissatisfied with the response you can complain to the Information Commissioner's Office; their contact details are at: www.ico.org.uk

Therapist's Right

Please note:

- If you don’t agree to your therapist keeping records of information about you and your treatments, or if you don’t allow them to use the information in the way they need to for treatments, the therapist may not be able to treat you

- Your therapist has to keep your records of treatment for a certain period as described above, which may mean that even if you ask them to erase any details about you, they might have to keep these details until after that period has passed

- Your therapist can move their records between their computers and IT systems, as long as your details are protected from being seen by others without your permission.