I, Alison Leverett-Morris, am registered as a Data Controller with the Information Commissioner’s Office (ICO), as required by law.
The basis on which I keep personal data is that of “Legitimate Interests”. This means that the data is necessary for me to fulfil the contract we have together (for example provision of therapeutic services).
Your personal data will only be used for the purpose for which it was collected.
For those who attend at least one therapy session (in person or online):
The data collected and held for the purpose of providing professional and ethical hypno-psychotherapy services includes: name, contact details, medical history, name of doctor (GP), information given as part of our work together, correspondence (eg. emails, texts), clinical notes, records of therapeutic interventions and payment records (if you pay via Paypal or bank transfer/online banking then your data is also held by those systems).
For those downloading products from the Fertility Oxford website:
The Downloads plugin records the name and email address of every individual who downloads products from the Fertility Oxford website. The data collected for the purpose of providing online therapeutic products includes: name, email adress and payment records (if you pay via Paypal then your data is also held by that system).
Personal data will not be used for marketing or information sharing purposes without your separate, written consent and you can opt out from receiving any such communications at any time by emailing firstname.lastname@example.org or email@example.com
Personal data will not be shared with third parties unless absolutely necessary within the bounds of the law and the professional code of ethics of UKCP (UK Council of Psychotherapy) and NSHPM (National Society for Hypnosis, Psychotherapy and Mindfulness); for example: a legal requirement to share your personal data with a court of law for reason such as harm to self or others, terrorism or money laundering.
Your therapist will only contact your medical health care provider with your written consent and if after consultation with you (the client) it is agreed to be reasonable, beneficial or necessary to do so either before commencing or during hypno-psychotherapy services.
In the absence of your written consent to contact your medical health care provider:
- The therapist will only contact or liaise with a medical health care provider in the event of a circumstance where it is reasonably considered necessary (for example, medical emergency or within the bounds of the law or the UKCP and NSHPM professional code of ethics)
- The therapist reserves the right to decline or discontinue provision of hypno-pyschotherapy services if it is reasonably considered unethical to proceed in the absence of contact with medical healthcare providers.
Personal data is stored securely, within a practice of data minimization. Consideration is given as to what is adequate, relevant and not excessive holding of data within the bounds of regulatory requirements and professional standards and ethics. For example: data of short-term value (such as emails confirming appointments) will be securely deleted (electronic data) or shredded (paper data) after its intended purpose has been fulfilled. Financial records (eg. client payment records) will be kept for 7 years as required by HMRC; clinical notes will be securely archived for 7 years, from the date of end of therapy, as required by the therapist’s professional indemnity insurer. For clients under the age of 18, the required period for keeping records is 7 years from the date that the client reaches majority (aged 18).
Under GDPR (General Data Protection Regulation) you (the client) have rights as an individual which you can exercise in relation to the information I hold about you. These rights include: the right of access, the right to restrict processing, the right of data portability, the right to object to direct marketing, automated decision making and profiling, processing of research and statistics. For more details of these rights.