The key pieces of legislation/guidance I am governed by are : Data Protection Act 1998, Access to Health Records Act 1990, The Common Law Duty of Confidentiality and The General Data Protection Regulations (GDPR) 2018. I am registered with the Information Commissioner’s Office under licence number ZA304769 www.ico.gov.uk.
I take your privacy very seriously. The data collected from you, i.e. your name, address, date of birth, telephone number, email address, GP contact details, medical history, and any information that you share with me so that I may treat you with hypnotherapy in my treatment room is collected in accordance with the General Data Protection Register.
The information collected from you when you book a treatment on-line via my website or purchase any hypnosis downloads on line via my website www.indigohypnosis.co.uk is also collected in accordance with the General Data Protection Register. Information is also further collected from you during our initial telephone consultation, and at subsequent therapeutic appointments is also collected in accordance with the GDPR.
Information is retained in secure electronic and paper records and access is restricted to myself only.
The information collected from you is used by me in order that I may stay connected with you, and send you appointment reminders by SMS and email, various downloads or other supportive information/documents that may be useful to your treatment.
The information collected from you is also used by me to ascertain how my hypnotherapy treatments may be fitted to your individual needs and to provide hypnotherapy treatment to the highest possible standard.
The information collected from you will not be shared with anyone, and treated in the strictest confidence. The information collected from you will not be added to your medical record without your prior written consent. There are a few exceptions to this, for legal and safety reasons including but not limited to: you give me reason to believe that you are going to harm yourself or harm another.
Under the Data Protection Act 1998, a person may request access to information (with some exceptions) that is held about them. You also have the right to refuse/withdraw consent to sharing your information with me at any time.