How will my data be stored?
In May 2018, the Data Protection Act was replaced by the General Data Protection Regulations (GDPR). These changes ensure that your personal, confidential, and sometimes sensitive data is held privately and securely.
How long will you hold my information for?
Jenny is a member of the Complementary & Natural Healthcare Council (CNHC), and as such, she is required to retain your data in line with CNHC regulations:
- Client records must be retained for 8 years after your final session.
- For children, records must be kept until their 25th birthday.
- For young adults whose treatment ends at age 17, records must be kept until they reach their 26th birthday.
Records will be destroyed in January following the prescribed retention period, in accordance with NHS regulations.
What if I would like my data to be destroyed before this date?
For legal reasons, Jenny cannot destroy your data before the retention period specified above.
Am I able to see or get a copy of the information held by you?
Under GDPR, you have the right to request access to the data Jenny holds about you. If you send a written request specifying the data you wish to see, Jenny will provide you with a copy within 30 days. Jenny may need to confirm your identity before releasing this information. This service is free of charge. However, Jenny’s insurance company’s legal team may need to verify any information she sends out.
What are your reasons for collecting this information?
Jenny collects the following information to provide high-quality support during your sessions:
- Your goals for therapy
- A small amount of medical information
- Brief session notes
- Your contact details
- GP contact details
- MyCaw research data (unidentifiable for scientific analysis)
- Information about important people in your life
This information helps Jenny maintain continuity in your sessions and ensures that she can refer to previous discussions to assist in meeting your goals. Jenny will only use your contact details or GP’s details with your explicit consent. MyCaw research data is used solely for the purpose of generating scientifically measured outcomes for Solution Focused Hypnotherapy.
How do I know that Jenny will store my information securely?
Jenny uses the following security measures to protect your data:
- Paper session notes: Stored in locked cabinets.
- Text messages: Secured with fingerprint recognition or a passcode on Jenny’s work phone.
- Emails: Password-protected email account.
- MyCaw research data: Accessed via a randomly authenticated passcode on a laptop protected by facial recognition.
Are our discussions within the hypnotherapy sessions confidential?
Everything you discuss during your hypnotherapy sessions remains strictly confidential. In some cases, Jenny may discuss aspects of your sessions with her supervisor to ensure she is providing you with the most effective support. However, no identifying details about you will be shared in these discussions. Jenny’s supervisor is also registered with GDPR.
What if I see Jenny outside of a hypnotherapy session?
Jenny is committed to maintaining your confidentiality at all times. While she may acknowledge you, it is recommended that further conversation be avoided in public settings. However, if you choose to discuss your therapy with others, that is entirely your choice.
Will Jenny discuss information about me with other health and social care professionals?
Jenny will only contact other health and social care professionals with your written consent. If Jenny needs to inform your GP about your therapy, she will require your signature to comply with GDPR requirements. In the event of an emergency or if Jenny believes you may harm yourself or others, she may need to contact the relevant authorities under her Duty of Care. Jenny will make every effort to discuss this with you beforehand. Additionally, Jenny is legally obligated to share information if required by a police warrant or court order.
Who is the Data Controller and what is their ICO registration number?
The Data Controller is Jenny Mellenchip.
Location: Room 2, Stem Cell Clinic, 13 Lichfield Rd, Stafford ST17 4JX.
This policy was last updated on 15th November 2024. It may be updated at any time, so please check back regularly to ensure you’re aware of the latest version.
ICO Registration Number: ZA750718.