• General Data Protection Regulations - GDPR 2018

    Agreement to hold your personal data in line with the General Data Protection Regulation

    Your Therapist, Trevor Collins, has a responsibility for personal data provided by clients of Mindset Clinical Hypnotherapy.  The lawful basis on which I hold this data is that, by signing this document, you are giving clear consent in writing for me to process your data for the specific purpose of support to the work we have agreed to do together in therapy.

    Typical Personal Data I Hold:

    Your Name, Contact Address, Email Address, Contact Phone Number, Date of Birth, Dr’s Name & Surgery, Medication, Name of family members, Notes made in and after session, Additional documents created from therapy, Any documents you provide me, etc. 

     

    Who I Share your Personal Data with:

    • Occasionally I may use a Clients presenting symptoms in discussions with my Supervisor in order to assist me with my continued professional development.  Full names are not shared and only minimal information is used during discussions.
    • Your Doctor, Psychiatrist or Consultant, only with your signed permission should I feel I need their approval prior to commencing therapy with you. 
    • Should I feel there is a threat to your safety, I may in certain circumstances wish to advise other professionals.  I would look for your approval prior if possible.
    • The Police, if I became aware of a threat of terrorism or money laundering.

     

    How I keep Personal Data:

    • In written form and documents – In a locked filing cabinet
    • In electronic form

              -       I store any relevant emails on a password protected system, for the period of therapy plus 6 months.

              -       I store records of session payments on my password protected accounts system.  Only first name and surname initial are used.

              -       I do not process your data to any 3rdparty or for any marketing or advertising, however from time to time I may ask Clients for a ‘Review’ of my services that I can then add to my website. Any review given simply uses your comments with no reference to your name. 

    In order to meet the GDPR Privacy Regulations, I need to keep a signed copy of your consent to keeping your records as outlined above. If you have a sensitivity to me holding any specific data, then please notify me immediately upon me requesting that data.