Privacy Policy under GDPR
Last Updated: 08/07/2024
Introduction
Richard Bloom Hypnotherapy is committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, and store your personal data, in accordance with the General Data Protection Regulation (GDPR) and Google search guidelines.
Information We Collect
We collect and process the following personal data:
- Name
- Address
- Phone Number
- Email Address
- Notes from Therapy Sessions
- Videos of Therapy Sessions
Purpose of Data Collection
We collect your personal data to:
- Provide and improve our hypnotherapy services
- Maintain communication for follow-up sessions and support
- Comply with legal and professional obligations (NHS guidelines)
Data Retention
- Personal Details (Name, Address, Phone Number, Email Address): Retained for as long as necessary to provide our services and as required by law.
- Notes from Therapy Sessions: Retained for six years from the date of your last session to comply with NHS guidelines.
- Videos of Therapy Sessions: Retained for three years from the date of the recording.
Legal Basis for Processing
We process your personal data based on:
- Contractual necessity: To provide you with our hypnotherapy services.
- Legal obligation: To comply with regulatory and professional guidelines.
- Consent: When you have explicitly provided consent for specific data processing activities.
Your Rights
Under the GDPR, you have the right to:
- Access: Request access to your personal data and obtain information on how it is processed.
- Rectification: Request correction of any inaccuracies in your personal data.
- Erasure: Request deletion of your personal data, subject to certain conditions.
- Restriction: Request restriction of processing your personal data under certain circumstances.
- Data Portability: Request transfer of your data to another service provider in a commonly used format.
- Object: Object to the processing of your personal data under certain conditions.
To exercise any of these rights, please contact us at contactrichardbloom@gmail.com
Data Security
We take the security of your personal data seriously and employ various measures to protect it:
- Encryption: Data is encrypted both in transit and at rest.
- Access Control: Access to data is restricted to authorized personnel only.
- Regular Audits: Regular security audits are conducted to ensure data protection measures are effective.
Third-Party Sharing
We do not share your personal data with third parties except:
- When required by law or regulatory authorities.
- With your explicit consent.
- To service providers and partners who assist us in delivering our services (all bound by confidentiality agreements and GDPR compliance).
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page, and we encourage you to review it regularly to stay informed about how we protect your data.
Contact Us
If you have any questions or concerns about our privacy policy or data protection practices, please contact us at:
Richard Bloom Hypnotherapy
07907 083 150
8 Goldsworthy Drive, Cornwall, UK EX23 8EX