In May 2018 the Data Protection Act was replaced by the General Data Protection Regulations (GDPR). Ana Bradley Hypnotherapy is GDPR registered. The changes to the Data Protection Act are aimed at ensuring that your personal, confidential, and sometimes sensitive data, is held privately and securely. This means that any data you give to Ana Bradley must be processed in a way that you agree with. GDPR exists to protect your rights as a consumer. It applies to your identifiable data, for example your name and address and any reasons you might have for visiting Ana. It also covers any session records, text messages or emails between Ana and yourself.
As a Solution Focused Hypnotherapy registered member of the National Council for Hypnotherapy (NCH) and the Association for Solution Focused Hypnotherapy (AfSFH) and as a requirement for insurance purposes, Ana is bound by their regulations regarding the length of time she must hold onto your information. These state that she must keep your data stored securely for 8 years after your final session. However, the rule for children is different and Ana must keep their data until their 25th birthday. The exception to this rule applies to young adults whose treatment ends when they are 17 years old when Ana must keep their records until they reach their 26th birthday. Client records will be destroyed in the January after the dates given above. This is in line with NHS regulations for holding data.
Under the GDPR rules, you are able to request the deletion of any of your records at any time. Simply write to Ana requesting that your records are destroyed and once she has confirmed your identity, she will action your request. There is no charge for this service. Ana will ensure that all your paper records are shredded with a cross shredding machine. Any electronic data held by Ana, such as emails or texts will be permanently deleted from the devices they are stored on. NB. If you request the deletion of any of your records, she will retain a written copy of the deletion request on file for insurance purposes.
In line with GDPR, if you send Ana a request in writing, specifying the data you wish to see, she will supply you with a copy of the data within 30 days. Ana will need to confirm your identity before sending you the information. There will be no charge for this service. NB Ana’s insurance company’s legal team may wish to verify any information Ana sends out.
Ana aims to offer the highest quality support to her clients and in order to do so she will collect the following information:
It is also a condition of Ana’s insurance policy cover that she takes and maintains accurate brief descriptive client consultation records. She will seek your permission before gathering personal information. This information will allow Ana to provide continuity within your sessions in order to help you towards your therapeutic goal. Ana will only use your contact details, address, and GP details with your explicit consent (See client agreement and initial consultation).
As a Solution Focused Hypnotherapy registered member (NCH) and the Association for Solution Focused Hypnotherapy (AfSFH), Ana is bound by their regulations regarding holding data securely.
Everything you discuss with Ana during your sessions will remain strictly confidential. Occasionally, it may be necessary for Ana to seek support from her supervisor on a particular aspect of your hypnotherapy, in which case she will anonymise your details. Ana’s supervisor is also registered with the ICO and abides by GDPR requirements. In certain circumstances if Ana believes that you are about to harm yourself or another, she has a “Duty of Care” towards her clients and would be required to inform the relevant authorities. However, she would aim to discuss this with you before taking any action. Legally, Ana would also have to provide the police with information as set out in a warrant or court order, should the situation arise.
Under GDPR regulations, Ana is bound to protect your confidentiality at all times. In public she may acknowledge you, but it would be ideal if any further conversation could be avoided. However, if you wish to discuss your therapy with other people, that is your choice and you are welcome to do so.
Ana is only able to contact other health and social care professionals with your written consent and would require your signature in line with GDPR requirements to notify them that you have entered into a therapeutic relationship with Ana or to notify them that your therapy has been successfully concluded. However, please see the section above regarding confidentiality and Ana’s “Duty of Care” to her clients for exceptions when it may be necessary to inform relevant authorities.
The Data Controller is Ana Bradley, Ana Bradley Clinical Hypnotherapy. This policy was last updated 01-11-2023. It may be updated at any time, so please check back regularly to ensure that you’re aware of the latest version. Please note that the cookie policy for AnaBradleyHypnotherapy.co.uk is available to view online.
ICO Registration number: C1186427
Signed Ana Bradley
Date: 06-12-2022
