In May 2018 the Data Protection Act was replaced by the General Data Protection Regulations (GDPR). The changes to the Data Protection Act are aimed at ensuring that your personal, confidential and sometimes sensitive data, is held privately and
securely.
At Amy Jones Hypnotherapy, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and store your personal data when you use our services or visit our website https://amyjoneshypnotherapy.com
By accessing our website or engaging with our services, you agree to the practices described in this policy.
1. Who We Are
- Practice Name: Amy Jones Hypnotherapy
- Registered Address: 151 The Rock, Bury, BL9 0ND
- Email Address: hello@amyjoneshypnotherapy.com
2. What Data We Collect
We may collect and process the following types of personal data:
a. Personal Information:
- Name
- Email address
- Phone number
- Address (if applicable)
b. Sensitive Data:
- An idea of what you would like to achieve by coming for hypnotherapy
- Health information you provide during therapy sessions
- Emergency contact details
- Brief session notes
- CORP research data
This information allows me to provide continuity with the sessions, to help you towards achieving your goal. This information will allow me to refer to the content in earlier sessions and previous discussions. I will only use your contact details/address and GP’s details with your explicit consent.
I am obliged by GDPR to always protect your confidentiality. So, for this reason, unless we have a previous relationship, I will not approach you or initiate conversation with you if I see you outside of sessions, unless you choose to do so. It will be your choice if you decide to disclose how we know each other.
c. Technical Data (via the website):
- IP address
- Browser type and version
- Cookies (see our Cookies Policy https://www.amyjoneshypnotherapy.com/cookies)
3 How We Use Your Data
We use your personal data for the following purposes:
a. To Provide Therapy Services:
- To schedule appointments and communicate with you.
- To deliver personalised therapy sessions.
b. To Comply with Legal Obligations:
- To maintain records as required by professional accreditation bodies (e.g., NCH, AfSFH).
- To safeguard you or others in cases of risk or harm.
c. To Improve Our Website:
- To analyse website usage and enhance user experience.
4. Legal Basis for Processing
We process your data based on one or more of the following legal grounds:
- Consent: When you provide explicit consent to process sensitive data.
- Contract: To fulfil our obligations when you engage our services.
- Legal Obligation: To comply with applicable laws and regulations.
- Legitimate Interests: To improve services and ensure website functionality.
5. How Long We Keep Your Data
We retain your personal data for the following periods:
Therapy Records: Retained for 8 years after the conclusion of services, as recommended by professional guidelines. Unless you are under 16, in which case I must hold your data until your 25th birthday. If you are 17 when your sessions end I must keep it until your 26th birthday. Therefore, all records will be deleted in
the January after the above retention scales. This is in line with NHS regulations for holding data.
- Website Data: Retained for the duration that the website is live.
After these periods, your data will be securely deleted or anonymised.
6. Sharing Your Data
We do not sell or share your personal data with third parties except:
- For Supervision (as required by professional bodies NCH, AfSFH).
Occasionally it may be necessary for me to discuss elements of your sessions with my supervisor to ensure that I am helping you in the most effective way. However, no identifying features about you will be disclosed during these discussions.
- When required by law (e.g., safeguarding authorities).
I am only able to contact other health and social care professionals with your written consent, and only if strictly necessary for the continuation of our work together.
Exception
In order to safeguard you and the people around you, if you were to disclose that you were going to carry out harm to yourself or someone else, then under my “Duty of Care” I am obligated by law to inform the relevant authorities. This is to support you to live well, and I would always aim to discuss this with you prior to contacting anyone. If I was issued with a police warrant or court order for your information, by law I would also have to provide them with your information.
- When using trusted third-party providers to deliver our services (e.g., appointment scheduling platforms).
These providers are bound by strict confidentiality agreements and data protection regulations.
7. Your Data Protection Rights
Under the UK GDPR, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct incomplete or inaccurate data.
- Erasure: Request the deletion of your personal data (“right to be forgotten”), subject to legal obligations.
- Restriction: Request limited processing of your data.
- Objection: Object to the processing of your data in certain circumstances.
- Data Portability: Request your data in a portable format.
To exercise these rights, contact us at hello@amyjoneshypnotherapy.com.
8. Security of Your Data
We take reasonable measures to protect your data from unauthorised access, alteration, or loss. This includes:
- Secure storage of physical records (e.g., locked cabinets).
- Encryption and password protection for digital files.
- Regular audits of our data security practices.
9. Cookies
We use cookies on our website to enhance user experience and analyse site traffic. For more details, refer to our Cookies Policy https://www.amyjoneshypnotherapy.com/cookies
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these websites. Please review their privacy policies before submitting any personal data.
11. Complaints
If you have concerns about our use of your data, please contact us first at hello@amyjoneshypnotherapy.com
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.
12. Changes to This Privacy Policy
We may update this policy from time to time. Any changes will be posted on this page with a revised “Last Updated” date. Continued use of our services or website constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy, please contact us:
- Email: hello@amyjoneshypnotherapy.com
- Registered Address: 151 The Rock, Bury, BL9 0ND