Privacy Policy

GDPR, Data Protection, and Confidentiality

Keeping your personal data secure and safe is a priority of mine. I invite you to read my privacy policy below to understand how the General Data Protection Regulations (GDPR), my insurance policy and my professional body’s code of ethics affect the way I handle your personal information.

I, Susannah Saunders, am both the Data Controller and the Data Protection Officer. My contact details are susannah@cityhypno.co.uk, phone 020 3700 4263.

  • This website is aimed as potential clients seeking therapy, as well as therapists looking to hire a room. I gather information about you from the details you provide either in person, on the phone, via email or via an online enquiry on my site.
  • There is no legal requirement for you to offer this information, but without it I will be unable to provide the service I offer.
  • The collection of your personal information enables me to decide if I am able to take you on as a therapist or a client and offer you an appointment; to provide you with treatment; to contact you regarding your treatment; and to invoice you for any outstanding payments.
  • The data I collect from you as a client may include: your name and contact details; information about your symptoms / triggers; current and past relationships / experiences; your family background; and your medical history.
  • The data I collect from you as a therapist may include: your name and contact details; your insurance details and your qualifications and certificates.
  • In line with these guidelines, you accept that when you contact me and / or provide me with information, you permit me to hold and use this information.
  • I keep the information you give me for seven years after your treatment (for adults), and for seven years after a minor reaches the age of majority (18), which is the length of time suggested by my professional body and required by my insurance company for client records.
  • Children: In collecting information from persons under the age of 16, consent must be provided by their parent or guardian in order for me to process their data lawfully.

Cookies:

  • This website uses cookies to better your user experience while visiting the website. It also collects cookies on behalf of the social media platforms (such as Facebook and Twitter). As required by the GDPR data legislation, where applicable this website uses a cookie control system, allowing the user to give explicit permission or to deny the use of / saving of cookies on their computer / device. If you choose to share information from this site using a social media button, you do so at your own discretion and accept that doing so may publish content to your social media profile feed or page.
  • Cookies are simple text files that are saved on your computer, mobile or other device via your Web browser. They contain small amounts of information about the your interactions and usage of the website. This allows the website, through its server, to provide you with a tailored experience within this website.
  • I would like to advise you that you can refuse the use and saving of cookies from this website on to your device’s hard drive by taking the necessary steps within your web browser’s security settings in order to block all cookies from this website and its external serving vendors or use the cookie control system if available upon your first visit.

Website Visitor Tracking Information

  • When you visit this website, a third party service called Google Analytics collects standard internet log information and details of visitor behaviour patterns. I do this to identify things such as the number of visitors to my site and which pages are looked at. This information is only processed in a way which does not reveal your identity. I do not allow Google to make any attempt to find out the identities of those visiting my website.

Sharing your information and confidentiality:

  • Client confidentiality means that I will not disclose information about you to a third party without your permission. This includes, not acknowledging I know you if we were to bump into each other outside of the sessions; not divulging information about you having treatment with a third party (such as if someone picks up the phone were I to call you); and ensuring your session notes are locked away in a filing cabinet. By giving me your phone number, you are permitting me to leave messages on your voicemail should I not be able to get hold of you, unless you state otherwise.
  • In line with the code of ethics set out by my professional body, I may share and discuss anonymous case studies for the purpose of continued professional development, supervision or training. Please note that anonymous means ensuring the removal of any personal details and information that might identify you.
  • I am duty bound to breach confidentiality if there is a legal requirement for me to do so, such as where the Children’s Act applies or a court order is issued, or if I have good reason to believe that significant harm to you or another person may arise should I not disclose that information.

You have rights over the information I hold about you. These are

  • Portability – you can request that I share your information with someone else
  • Rectification – if you believe there are any inaccuracies in my records then you can ask me to change them
  • Erasure – in certain circumstances you may have the right to ask me to remove your details from my records verbally or in writing (this is sometimes called ‘the right to be forgotten’)
  • Fair profiling – you can ask that any processes I automate are done by a person instead of a computer. I don’t currently automate any information processing, although I do use online forms to collect information.
  • Right of access – you can have a copy of the information I hold at any time, by requesting it in writing. If you do this, it will be provided within 30 days and free of charge.
  • Restricting processing – in some circumstances you can request that I stop processing your information
  • Objection – you can object to the way I process information (e.g. if it is used to send you direct marketing and you don’t want to receive this) and can ask me to stop using it in the way
  • Information – you have the right to understand how I collect and process your information (hence this privacy notice)

You can learn more about these rights on https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

You can withdraw your permission for me to use your information at any time, although it may mean ceasing treatment or room hire.

You have a right to complain to the ICO if you have any problem with the way I store or use your data, or if you do not think your rights are being respected.