Privacy Policy

In May 2018 the Data Protection Act was replaced by the General Data Protection Regulations (GDPR). The changes to the Data Protection Act are aimed at ensuring that your personal, confidential, and sometimes sensitive data, is held privately and securely. 

What are your reasons for collecting this information? 

I collect this information so I can provide the best experience for your therapy and so I can plan our work together. I also collect it in case you need this information, or in case you want to share it with your GP or other professionals involved in supporting you.

How do I know that you will store my information securely?  

I keep digital information in folders on a secure password protected computer.  Information is also backed up on a password protected cloud online.  When I make handwritten notes, I type these up on the computer at my earliest opportunity, so they are stored as described above. I will then shred the paper version. If I keep any handwritten notes, I will store them in a locked filing case.

How your data is used

Your information is kept confidential between you and me. The only exception is supervision, where I may discuss aspects of your case to ensure you receive the highest standard of care—however, all personal details are removed so you cannot be identified.

I will never share your information with anyone else without your clear and explicit consent.

How long your data is kept

According to my professional body (National Council for Hypnotherapy) written records will be stored securely for 8 years after the last interaction if you are an adult client. For clients who are under 16 years of age when last seen, information needs to be stored until you are 25 years old, and if you are 17-18 years old it needs to be stored until you are 26 years old.

Paper documents are scanned and stored electronically, then securely shredded once your therapy is completed.

What if I would like my data to be destroyed before this date? 

Due to the sensitive nature of what we do, my insurance company (Holistic Insurance) does not allow the deletion of data before the minimum time for holding said data, as outlined above. 

Are our discussions within the hypnotherapy sessions confidential?

Yes, unless I need support from my supervisor, or I believe that you are about to harm yourself or another. I may also discuss your case anonymously in group supervision with no identifiable details used. 

Who is the Data Controller and what is their ICO registration number?  

The Date Controller is Andrea Massey. Information Commissioner’s Office ICO Registration Number: 00010443729

Your rights

You have the right to request access to the information I hold about you, and you may ask for it to be corrected or deleted if you believe it is inaccurate.

If you have any concerns about how your data has been handled, please contact me so I can look into it.

If you are not satisfied with the response, or believe your data is being used unlawfully, you can contact the Information Commissioner’s Office (ICO).