General Data Protection Regulations, 2018 (GDPR)
The GDPR replaces the 1998 Data Protection Act to ensure your personal and sensitive, confidential data is kept private, held securely, and is processed only in the way that you have agreed to. It covers identifiable personal data, e.g. your name, address and telephone number. It also covers the contents of any session records, text messages or emails we may exchange.
We are a Data Controller of your information.
- Our needs to perform a contract with you
- You have given us permission to do so
- Processing your personal information is in our legitimate interests
- We need to comply with the law
Personal data that we process shall not be kept for longer than is necessary. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what Personal Information we hold about you and if you want it to be removed from our systems, please contact us by email.
In certain circumstances, you have the following data protection rights :
- The right to access, update or to delete the information we have on you.
- The right of rectification.
- The right to object.
- The right of restriction.
- The right to data portability
- The right to withdraw consent
Clients of Implicity Hypnotherapy
Why Information Is Collected
In order to provide the service I collect information about; why you are using the service, a small amount of medical information and a small amount of information about your important others, alongside brief session notes. This information ensures that I have reference to previous discussions so that I can provide the best treatment to you. Your contact details will only be used in connection with your treatment and with your consent. Doctors details will only be used with your explicit consent.
Everything we talk about during our sessions is strictly confidential between you and me. To ensure I am doing my job effectively and that I have the right support, I may discuss elements of our sessions with my supervisor. During these discussions I do not disclose any details that may identify you to my supervisor, and my supervisor also adheres to the GDPR.
Any contact, relating to you, with other health care professionals eg your GP would only be made with your explicit signed consent. E.g. If I were to write to your GP to notify them of your treatment with me.
If you expressed an intention to carry out harm to yourself or someone else, then under my “Duty of Care” I am obligated by law to inform the relevant authorities. This is to safeguard you and the people around you. I would always aim to discuss this with you prior to contacting anyone.
If I was issued with a police warrant or court order for your information, by law I would also have to provide them with your information.
Your information is held securely
- Hardcopy documents – Are all stored in a locked cabinet.
- Text messages – My work phone is secured with a pin code.
- Emails – My email account requires a user name and password.
Subject to your prior consent, we may publish information you provide about treatment you received from us as a Testimonial on our website. Such information may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such information by others. To have your testimonial deleted from our website please contact us by email.
As any other website, our website uses ‘cookies’. These cookies are used to store information including visitors’ preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users’ experience by customizing our web page content based on visitors’ browser type and/or other information.
You can choose to disable cookies through your individual browser options. More information on how to do this can be found by visiting the following links :
- https://support.google.com/chrome/answer/95647?hl=en (Chrome);
- https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox);
- http://www.opera.com/help/tutorials/security/cookies/ (Opera);
- https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);
- https://support.apple.com/kb/PH21411 (Safari); and
- https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).
Note that if you block cookies, some features of our website may not be available to you.
Links to other sites
Our website follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services’ analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.
In some instance personal data may be collected from people who are not yet clients of Implicity Hypnotherapy, for example through website contact forms, blog subscription services or through 3rd party services such as Facebook, Bark.com, Hypnotherapy Directory and other similar.
Website Contact Form
When you contact us via our website Contact form, we will collect your name and email address. By using the Contact Form you consent to us using this information for correspondence purposes, notably to discuss your interest in Hypnotherapy treatment and to book an appointment. To have your email deleted from our records, please contact us by email.
Blog Subscription Service
When you sign up to our Blog Subscription service, we will collect your email address. By using the Blog Subscription service you consent to us using this information in order to send you by email our Blog Posts as and when they are published. To unsubscribe and have your email deleted from this service, either click “Unsubscribe” at the bottom of a Blog Post email, or contact us by email.
When you provide details via third party services (which may be name, email address and/or phone number) in response to activity by Implicity Hypnotherapy or in expression of interest in the services offered by Implicity Hypnotherapy you consent to us using this for the purposes of sending you information about services in which you have expressed interest, contacting you to discuss your interest and to book appointments. Information provided through 3rd party sources may be held in a secure external CRM system to facilitate this. To have your details removed from this service either click “Unsubscibe” at the bottom of any email or contact us by email.
The external CRM system currently in use is Mailchimp and information about data security can be found here
No data gathered from any of these sources will ever be shared or sold.