Privacy, Confidentiality, Data Protection, Complaints
Privacy
Hypnotherapy and coaching are collaborative processes. I do not ask you to divulge any secrets. Some exchange of information is highly beneficial in helping you. You do not have to tell me anything you don’t want to, and I won’t pry.
Confidentiality
Anything we discuss is confidential.
To provide you with the best service and standard of care, I may occasionally, for research or supervision purposes, discuss your case with other professionals.These professionals may be my mentor(s), peer supervisors (other trusted hypnotherapists) or specialists in areas related to your circumstances. In such cases, all personally identifying details such as name and location, and anything irrelevant to the specific concern, are not shared.
If you want to opt out of this extra level of support, please let me know at any time.
If I believe you, or someone else, is at risk of serious harm, I may be obliged by law to breach the confidentiality agreement. This may involve sharing relevant confidential information with, for example, the police. If this happens, I will contact you (likely by e-mail) in advance. If you have any questions about this, please ask me.
Data
All physical and electronic records of cases and clients are kept confidential and secure.
You may request in writing (e-mail will suffice) a copy of any notes I have from your case.
Your personal and contact details provided through any medium will not be passed on by me to any advertising or marketing agency.
Details provided via my website for membership or sales may be passed on to relevant 3rd party companies such as Stripe or PayPal for payments processing and services you have requested only.
The Formal Version
Who I am and how I process your personal data
I, Fred Fogarty of MindSpa Odyssey, comply with my obligations under the General Data Protection Regulation (GDPR) by keeping personal data up to date; by storing (and destroying it) securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
I use your personal data for the following purposes:
To deliver the service that you have requested;
To contact clients as necessary in accordance with the services they have requested;
To maintain my own accounts and records.
Individual client data will never be passed to a third party without the express consent of the respective client, always provided that such confidentiality is neither inconsistent with the therapist’s own safety or that of the client, the client’s family members or other members of the public, nor in contravention of any legal action or legal requirement.
In accordance with my need to maintain the possibility of access to client data as a result of returning clients or those who may wish to lodge a complaint in respect of our professional services to either our professional body or our insurers (i.e. in all cases perhaps after a long period of time has elapsed), I retain client data for a minimum period of 7 years. For clients under the age of 18, data will be retained until their 25th birthday.
My Lawful Basis for processing client personal data
The client has given clear consent for me to process their personal data for a specific purpose. Further, the processing is necessary for both my client’s and my own legitimate interests.
Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
The right to request a copy of your personal data which MindSpa Odyssey holds about you;
The right to request your personal data erased where it is no longer necessary for MnidSpa Odyssey to retain such data;
The right to withdraw your consent to the processing at any time;
The right to request that I provide the client with his/her personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), (where applicable);
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
The right to object to the processing of personal data, (where applicable);
The right to lodge a complaint with the Information Commissioners Office. (See below).
Complaints
Services:
Please contact me directly if you have any complaints about the recordings or hypnotherapy services.
If you believe this is not an appropriate avenue for your complaint, I am a member of the General Hypnotherapy Register. They provide an avenue for complaints here: https://www.general-hypnotherapy-register.com/complaints-procedure/
Data:
The client has the right to complain to the Independent Commissioner’s Office (ICO) if they think there is a problem with the way I am handling their data