Collecting data from the public
Omara Hypnotherapy respects your rights to privacy and confidentiality and will only utilise data that you provide. If members of the public contact Karen Neeson at Omara Hypnotherapy by post, via email, or by using the contact form on the website, you give your consent for your contact details (this can include your name, contact telephone number, email address and circumstances around why you require therapy) to be collected, stored and processed by Omara Hypnotherapy for the legitimate purposes of responding to your enquiry or complaint in accordance with this Privacy Notice.
Every effort will be made to ensure the security of any information or data you provide via Omara Hypnotherapy website or via email, although 100% security cannot be guaranteed using electronic means.
Why we need your data
We will collect data for the following purposes:
To process, administer, and maintain information about clients.
To communicate with clients about their treatment.
To develop a tailored treatment plan to fit the client’s needs and goals
To respond to enquiries, feedback, requests, or complaints from clients and/or members of the public.
For insurance purposes and to be able to reach clients in the event of an emergency or to be able to pass contact details and addresses on to emergency services if necessary, should for example the client inform the therapist either during or outside of the therapy sessions that you (the client) is currently at risk to themselves or others.
What we do with your data
All the data collected, processed, and stored will remain confidential between the client and the therapist.
However, Karen Neeson at Omara Hypnotherapy may talk about client cases with all personal and identifiable information redacted in a supervision capacity with their supervisor/supervision team (other therapists) in order to provide you with the best service possible.
Your data will not be passed on to any other person or organisation without your explicit prior consent.
Processing of data from the public
Karen Neeson at Omara Hypnotherapy will only process data from the Public for the purposes of responding to an enquiry, feedback, or complaint. Once an enquiry or complaint has been resolved or closed, no further processing of data will take place.
Storage and retention of data from the public
Our aim is to only utilise and store data for as long as strictly necessary. For simple enquires from members of the public, we will endeavour to delete/erase any relating data within 12 months of the enquiry being resolved.
Karen Neeson at Omara Hypnotherapy is required by membership to her governing bodies to keep the records off all adult clients for 6 years from the completion of their therapy. For clients under the age of 18, Karen Neeson at Omara Hypnotherapy by GDPR law is required to keep records until the child or young persons turns 21 years old or for 6 years from the end of their therapy (whichever is greater). This includes information about why the client sought therapy and the notes taken during all sessions together.
In the event of dealing with a complaint, we will keep personal information contained in electronic files securely, with restricted access and for a duration in line with regulatory standards, for a maximum for seven years. After this time, all records will be erased, and any paper copies securely destroyed.
When We May Share Your Personal Data
There are times when we may need to share or disclose your Personal Data in certain circumstance.
Karen Neeson at Omara Hypnotherapy uses the following software provider to process electronic data, including personal data and Clinical Outcomes and Research Program (CORP) These providers state that they are GDPR compliant and/or apply equivalent/adequate safeguards.
There may also be situations in which it is necessary for us to disclose your Personal Data to other third parties, which include but are not limited to: HMRC & Companies House.
If we are under a duty to disclose or share your Personal Data in order to comply with any legal obligation, lawful requests, court orders and legal process.
Your rights
In accordance with the GDPR, you have the following rights concerning your data:
Your data will not be shared with any third parties unless you request that we do so, or you provide us with your consent – this is known as your ‘right to portability’.
You have the ‘right to be forgotten’ – should you choose to withdraw your enquiry you have the right to request we erase all your details from our files (electronic and hard copy) within 30 calendar days. This does not apply in certain circumstances, for example, your details will not be erased in the event of an ongoing complaint or dispute.