PRIVACY NOTICE (Data Processing) 

 

ABOUT:

 

Vicky George Coaching and Hypnotherapy (VGCH) is the data controller and the data processor for the purposes of the UK General Data Protection Regulations (UK GDPR) and the Data Protection Act 2018. VGCH complies with their obligations under the UK GDPR and DPA by:

 

• Keeping personal data up to date.
• Storing data securely.
• Collecting personal data that is relevant for the purpose of delivering the services the client requests.
• Protecting personal data from loss, misuse, unauthorized access and disclosure.
• Securely disposing of personal data held at the end of the retention period or in certain circumstances at the client’s request.

 

HOW YOUR DATA WILL BE USED: 

 

Your personal information will be used by VGCH for the purpose of the provision of therapy services, including coaching, hypnotherapy and neurolinguistic programming (NLP). The processing of your information is necessary as defined under Article 6 (1) (a) ‘the data subject has given consent to the processing of their personal data for one or more specific purposes’. 

 

When you work with VGCH, I will ask you to sign a consent form allowing the collection and use your personal data to provide the services you have requested. You are under no obligation to share your personal data, however if you chose not to, I will be unable to work with you.

 

Your personal data will be used to:

 

• Deliver services has requested;
• Contact you as necessary in accordance with the services they have requested;
• Contact you via surveys to ascertain your opinions on the service received;
• Maintain VGCH’s own accounts and records.

 

The categories of data/information that will be collected includes:

 

• Your name
• Your address
• Your contact details: email and telephone number
• Your medical history
• Your support network including your family situation
• Details of your employment 
• Your interests and hobbies
• Your lifestyle
• Details of the issue you are seeking help for.

Confidentiality

 

The ethical codes of the General Hypnotherapy Register (GHR) and the European Mentoring and Coaching Council (EMCC) to which I subscribe require the strictest level of confidentiality is maintained with all client and sponsor information. However, both codes set out circumstances where confidentiality cannot be maintained and these are:

• if the release of information is required by law for example where there is a court order demanding disclosure.
• if there is a risk to the personal safety of the coach/therapist or that of the client, the client’s family members or other members of the public.

 

You should be aware that as a practicing coach and hypnotherapist I am required by EMCC and GHR to have regular supervision. Supervision ensures I am practicing safely and allows me to discuss any issues relating to my practice, which can include discussing clients. Where clients are discussed, they are referred to anonymously and any potential identifying information is also anonymised. You should also be aware that supervision itself is confidential.  

 

Your data will never be passed to a third party without the express consent of the respective client, always provided that such confidentiality is neither inconsistent with the therapist’s own safety or that of the client, the client’s family members or other members of the public, nor in contravention of any legal action or legal requirement.

 

Data Retention

 

For adults aged 18 and over records are retained for 7 years following the date of your last session. For children records are retained for 7 years after they reach the age of 18.  After this time the data is deleted from all systems and any paper records are shredded and disposed of securely. 

YOUR RIGHTS AND YOUR PERSONAL DATA 

 

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:

 

• The right to request a copy of your personal data.
• The right to request any personal data is corrected if it is found to be inaccurate or out of date.
• The right to request your personal data is erased where it is no longer necessary for to retain such data.
• The right to withdraw your consent to the processing of your data at any time but this means that our working relationship will cease as a result.
• The right to request that your personal data is sent to someone else.
• The right to restrict further processing where there is a dispute in relation to the accuracy or processing of your personal data.
• The right to object to the processing of personal data, for example if data is used for direct marketing and you do not wish to receive this information.
• The right to lodge a complaint with the Information Commissioners Office. (See below).

 

Complaints Notice

You have the right to complain to the Independent Commissioner’s Office (ICO) if you believe there is a problem with the way VGCH handles your data. (https://ico.org.uk/concerns/handling/).