The data controller and officer is Sally Addenbrook
Contact details
Name: Sally Addenbrook
Address: 51 Stocks Lane
Chester
CH3 5TE
Phone Number: 01244 314377
E-mail: sally@hiddenstrengthstherapy.co.uk
The basis for collecting and processing data is “legitimate interest” as defined in Article 6(3) of UK GDPR. “Legitimate interest” is the information required to be able to provide the client with Hypnotherapy services
Some of the information you provide may fall under the definition of ‘special category data’ of healthcare information as detailed in Article 9. 2(h) of UK General Data Protection Regulations. The condition for processing this special category data is “processing is necessary for medical diagnosis, the provision of healthcare or treatment pursuant to contract with a health professional”’
If you provide details of a criminal offence, the condition for processing this data ‘is met if the data subject has given consent to the processing’ as detailed in Schedule 1, Part 3, paragraph 9 of the Data Protection Act 2018.
The type of personal information collected
I currently collect and process the following information:
For enquiries where there is no further engagement in therapy services I hold only the information you provide at the time of the enquiry.
For clients, engaging in therapy services, I hold the following information:
- Name, address, date of birth, phone number, email address. Data that you have provided.
- Any communications between ourselves; emails, letters, text messages, phone messages
- Case notes detailing our work together
- Any information from a relevant third party, including but not exclusively: GP; insurance provider; 3rd party referral information (e.g. information from another therapist or healthcare provider). Data that may be provided by yourself or directly from a third party.
This data is collected in order to provide therapy services.
This data will not be shared with anyone, except possibly your GP, or under the ‘Requirements for Disclosure’, which will be detailed and explained in the first session.
Your name will appear on bank details provided to my Accountant unless you request for this to be redacted. Personal information may be shared with the courts in the event of debt recovery
How your personal information will be stored
Your information is securely stored.
All personal details are stored on a computer hard drive, which is password protected.
Mobile phone details are stored on the mobile phone with fingerprint access
Case notes are stored on a computer hard drive and backed up onto an external hard drive, both of which are password protected.
Case notes are given an identifying code and do not contain any personal information about the client. Should they be accessed it would not be possible to identify the client from the information
Identifying codes and personal details are kept on a separate computer hard drive and are password protected
Information will be kept for seven years after the end of therapy service, as requested by my insurer. All personal details and case records will then be deleted from the phone, the computer hard drive and external hard drive.
Data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask for copies of your personal information. This will be provided within 30 days of the request
Your right to rectification – You have the right to ask to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This will be completed within 30 days of receiving all changes
Your right to erasure – You have the right to ask to erase your personal information. However, for insurance purposes, case records need to be retained for 7 years and will then be disposed of.
Your right to restriction of processing – You have the right to ask to restrict the processing of your personal information in certain circumstances. This allows for records to be stored but cannot be used for research or statistical reporting
Your right to object to processing – You have the right to object to the processing of your personal information. Your details will not be used for marketing purposes, without your consent and will never be passed on to third party organisations for their advertising or marketing purposes
Your right to data portability – You have the right to ask for the transfer of personal information you gave us to another organisation, or to you.
You are not required to pay any charge for exercising your rights. If you make a request, we have 30 days to respond to you.
Please use the contact details at the beginning of this privacy policy if you wish to make a request.
Any data breach will be reported to the Information Commissioners Office within 72 hours of the breach and everything will be done to minimise the impact of this data breach and to inform you
How to complain
If you have any concerns about the use of your personal information, you can make a complaint via the contact details at the beginning of this privacy policy
You can also complain to the ICO if you are unhappy with how your data has been used.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
If you have concerns about the therapy you receive you can discuss with your therapist. You can refer to the following link to the code of ethics for the National Society of Talking Therapies https://thenationalsociety.net/code-of-ethics-and-practice/
You can also make an official complaint to:
National Society of Talking Therapies
Email: enquiries@nchp.ac.uk
Phone: 01204 432004