Privacy Notice

CalmerU Privacy Notice

 

Lisa Pestell Dip Hypnotherapy, Bed hons, NPQH
 
The General Data Protection Regulation (GDPR) is concerned with personal information that I collect, store, and share. 
Personal Information I Collect:

• Name.

• Address.

• Gender (or preferred identity).

• Date of Birth / Age.

• Telephone/SMS number (plus permission to send SMS & leave voice message).

• Email address

• Relationships & Progeny.

• Occupation & Hobbies.

• Objectives for therapy and any relevant personal history.

The above information helps me to get to know you and contact you regarding your sessions

• Next of kin

• GP name & address

• Medical conditions

• Prescribed medication.

The above information allows me to contact your Dr or next of kin if I was worried you were at risk. If I can I will tell you in advance

• Previous Therapy History.

• Difficulties & Issues.

• Session notes.

The above information allows me to formulate a therapy plan tailored to your needs and be able to reflect on previous sessions
 
How I Store Your Personal Information:

• Paper – written forms including; Contact Sheet / Therapy Information & Agreement Form / GDPR signed agreement ~ these will be kept in a locked filing cabinet,Y our Assessment Record / Brief Session Notes will be kept in locked filing cabinet. Any records kept on my lap top will be password protected.

• Smartphone – I will store your name and telephone number in my code protected business smartphone.

• Email – your email address and correspondence will be stored in my email account. I will only access my password protected email account using my password protected laptop or code protected smart phone.

• Website – none of your personal information is stored on my website, other than to momentarily collect and send it to my business email if you complete the contact form as your initial contact.

 
How long I will store your personal information and how I will dispose of it:

• I will keep your session notes, contact sheets, assessment and agreements for a period of 8 years after our work finishes. After this time, I will shred all paperwork and delete your electronic records from the vault. Your email address will be deleted from my email account at the same time.

• I will keep your name and telephone number on my business phone for a period of 8 years after our work finishes to maintain continuity if you return to me for further advice or treatment. After this time, I will delete your name and telephone number from my business phone. Text messages will be deleted when you finish therapy with me.

 
How I may process/share your personal information:
Only I will have automatic access to your data and I will never sell this or use it for unethical reasons. It is very unlikely I will share it unless;

• My notes are subpoenaed by a court of law.

• If you or anyone you tell me about is at harm or risk of harm I may have to share information.

• I have regular supervision as required by the Hypnotherapy Society where I talk about my work, but I will never use your name without your permission.

If your health is in jeopardy whilst in a session I may share your name and contact information with an emergency healthcare service.

• If I become aware of your intent to cause harm to another person/organisation (e.g. terrorism) the law may require me to inform an authority without seeking your permission and without your knowledge.

 
Your Rights under the GDPR agreement:
You have the following rights;

• The right to be informed what information I hold (this document).

• The right to see the information I hold about you (free of charge for the initial request) subject to timescales within the regulations.

• The right to rectify any inaccurate or incomplete personal information.

• The right to withdraw consent to me using your personal information.

• The right to request your personal information be erased/deleted.

• The right to data portability.

• The right to object.

• The right not to be subject to automated decision making including profiling.