PRIVACY POLICY

Contact Information:

Helena Meadows, Suite 5, 7 French Row, St Albans AL3 5DU.

07855 918895 | helena@meadowstherapy.co.uk | www.meadowstherapy.co.uk

I, Helena Meadows am the Data Controller and Processor of Helena Meadows Hypnotherapy, ICO registration ZA352246.

To make sure your personal information is protected, I have a series of technical and administrative measures in place. I will treat your personal information in a way that is compliant with the DPA and the GDPR.

The basis on which I keep client data is that of “Legitimate Interests”. This means that the data is necessary for me to fulfil the contract that we have together (i.e. to provide therapy) and that it is data that you would reasonably expect me to hold and use.

For those who enquire about therapy, the data I hold includes any information you have sent to me by email/text/message.

For those who book and attend at least one session, the data I hold includes:

Some of the information that you give me may fall under the definition of special category of data as defined by the General Data Protection Regulation. The condition for processing this special data is “processing is necessary for medical diagnosis, the provision of health care or treatment pursuant to contract with a health professional”.

Data is not shared with anyone, except possibly your GP, and for any reasons covered by the Requirements for Disclosure which are detailed and discussed when we first meet. My accountant may see bank or credit card which contain any information that you submit when making payment. If you would like me to redact your identifiable date before sending to the accountants then please let me know.

The data is primarily used to enable me to provide therapy or supervision for you. It may also be used for scientific research purposes and statistical purposes.

Details of where data is held:

I take the security of data seriously and as such:

You have rights with regards to the data held:

Disclaimer: Your role in protecting your own privacy

I make every effort to ensure that my clients' personal information is held securely and to safeguard against unauthorised access. At the same time, in agreeing to my privacy policy:

By signing this agreement, you agree for me to hold and process your data in accordance with this privacy policy which abides by the rules set out by the General Data Protection Regulation 2016 and the Data Protection Act 2018. You also give me permission to conduct therapy via secure online conferencing platform and contact you by phone, email, or post to arrange appointments or discuss other points considered relevant to the progress of the therapy.

Client Signature______________________ Date _________________

Client Name _________________________