Privacy Policy

This policy is GDPR compliant and sets out: 

• What information I collect, why it is collected and how it is collected 
• How it is stored, how long it is kept and when/how it is disposed of 
• Confidentiality and how/if the information can be shared
• The legal reasons for processing your data (under the GDPR 2018) 
• Your data protection rights and how to complain if you are unhappy 
• My contact details 

The GDPR (2018) replace the Data Protection Act (1998) to ensure that your personal and sensitive data remains confidential, is held securely and is processed in the way that we have agreed. It is there to protect your rights as a consumer of any service where your identifiable data, e.g. your name and address or whether you have a specific condition, are collected and stored. It covers all forms of information (data) including paper records and electronic records such as text messages or emails.

The following information is provided by you: 

• Personal information (name, address, DOB, contact details) 
• Sensitive information (health and well-being) 

It is your choice how much personal or sensitive information you provide to me. However, I need a certain amount of information to be able to provide you with a safe and appropriate service. If you choose not to provide me with enough relevant information, I may not be able to offer you therapy.  

Cookies are small text files placed in storage on your web browser. They are harmless and are used to track user activity and improve a user’s website experience.  My website uses cookies to help me understand user behaviour. This means that a small piece of text (the "cookie") is stored on your web browser. This cookie lets me know that all the different things you do on the site are done by the same person. I do not collect or harvest any personally identifiable information. The only information I have about your identity is the information you explicitly provide to me through submission forms on the website. I do not sell any personally identifiable information to any third parties. However, I do analyse user behaviour in order to better serve you and other visitors. Tracking your activity through the website (what you click on, how long you stay) helps me make better decisions about content and design. You will be given the option to accept or reject cookies when you first visit the site. By clicking accept, you are agreeing to the privacy policy and use of cookies.  

However, if you wish to know how to delete cookies, please use the following link: https://www.privacypolicies.com/blog/how-to-delete-cookies/  

Google Analytics 

All of the personal information is provided to me directly by you for one of the following reasons: 

• To enquire about hypnotherapy services (via the website, email, text or phone call) 
• To receive hypnotherapy services (via the consultation form sent to me by email or post) 

I use the information that you have provided to: 

• Provide you with information about the services I offer (website, email, phone) 
• To plan individualised hypnotherapy programmes (client file) 
• To deliver hypnotherapy programmes (face-to-face or online) 

Before becoming a client, any information provided to me through a website enquiry, email or text will be stored for a period of 1 month. If I do not hear from you again, your information will be deleted.  

Once you become a client, I am required to store your information for 7 years. This is a requirement of my registration with the CNHC and GHR 

The information is securely  stored and disposed of as outlined below:

Emails: 

• My laptop is password protected and secured by McAfee Total Protection 
• My email account is password protected 
• Emails are store securely on an email server provided by GoDaddy for as long as the information is relevant to your therapy for up to 7 years.  
• Any personal or sensitive information sent by email will be printed off and stored in the client file and/or deleted.  

Client File (paper records) 

Paper records are stored in an individual client file, in a locked cabinet to which only I have access. These will be stored for up to 7 years in line with CNHC requirements. All paper records will be disposed of by shredding. 

Mobile Phone:

• My phone is secured by fingerprint access and any texts will be deleted or relevant content transferred to the secure client file. 
• Any personal or sensitive information sent by text will be copied to the client file and then deleted from the phone.  

Website:

Cookies/analytics /IP addresses (to follow)

Everything we discuss is confidential and I will not share this information with anyone without your consent. The only reason that I would share your information without your consent is if I am obliged to do so by law or where I have a duty of care to safeguard your well-being (eg. if I believe that there is a risk of harm to you or others). In both cases, I would inform you that your information has been shared.  

Please note, I may discuss your case within clinical supervision (with another qualified hypnotherapist) to support my on-going development and practice. However, this is done confidentially and no personal details would be shared. Your case would be discussed in an anonymised way to protect and respect your right to confidentiality.  

Under the UK General Data Protection Regulation (UK GDPR), there are a six lawful reasons for processing information.  

In the case of receiving hypnotherapy services, we have a contractual obligation – by completing and signing the consultation form and contract, you have entered into a contract with me, therefore, the basis for processing your data is contractual. 

However, with regard to signing up to receive newsletters or other marketing information (such as offers), this is done on a consent basis, which means I can only send you information if you give me your consent, and you can withdraw your consent at ay time.  

Under data protection law, you have rights including: 

• Your right of access - You have the right to ask for copies of your personal information.  
• Your right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.  
• Your right to restriction of processing - You have the right to ask me to restrict the processing of your personal information in certain circumstances.  
• Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you, in certain circumstances. 

You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you. 

Please contact me at hello@thrive-hypnotherapy.co.uk if you wish to make a request. 

If you have any concerns about our use of your personal information, you can make a complaint to me at hello@thrive-hypnotherapy.co.uk  

You can also complain to the The Information Commissioner’s Office (ICO) if you are unhappy with how I have used your data: 

Wycliffe House 

Water Lane 

Wilmslow 

Cheshire 

SK9 5AF 

Helpline number: 0303 123 1113 

ICO website: https://www.ico.org.uk 

If you wish to discuss anything to do with your personal information, please get in touch:

Name: Debbie Watson 

Address:       Holly Bank, High Street, Marchington, Uttoxeter, Staffordshire.   

Postcode:       ST14 8LD  

Phone:       07963 330681 

E-mail:       hello@thrive-hypnotherapy.co.uk