LB Wellness Practice Privacy Policy

The General Data Protection Regulation (GDPR) is concerned with personal information that I collect, store, and share.

Personal Information I Collect:

• Name.
• Address.
• Gender (or preferred identity).
• Date of Birth / Age.
• Telephone/SMS number (plus permission to send SMS & leave voice message).
• Email address
• Relationships & Progeny.
• Occupation & Hobbies.

The above information helps me to get to know you and contact you regarding your sessions

• Next of kin
• GP name & address
• Medical conditions relevant to therapy sought.
• Prescribed medication.

The above information allows me to contact your Dr or next of kin if I was worried you were at risk. If I can I will tell you in advance:-

• Previous Therapy History.
• Difficulties & Issues.
• Session notes.

The above information allows me to formulate a therapy plan tailored to your needs and be able to reflect on previous sessions

How I Store Your Personal Information:

• Paper – written forms including Contact Sheet / Therapy Information & Agreement Form / GDPR signed agreement ~ these will be anonymised and kept in a locked filing cabinet in my locked therapy room. Your Assessment Record / Brief Session Notes will be kept in a separate locked filing cabinet in my locked therapy room. The two separate files will be linked by a client code system and these details will be in an encrypted and password protected vault on my laptop.
• Smartphone – I will store your name and telephone number in my code protected business smartphone which is exclusively for business purposes text messaging and telephone calls.
• Email – your email address and correspondence will be stored in my email account. I will only access my password protected email account using my password protected laptop or code protected tablet.
• Website – none of your personal information is stored on my website, other than to momentarily collect and send it to my business email if you complete the contact form as your initial contact.

How long I will store your personal information and how I will dispose of it:

I will keep your session notes, contact sheets, assessment, and agreements along with your unique code for a period of 8 years after our work finishes as required by my membership of the CNHC. After this time, I will shred all paperwork and delete your electronic code from the vault. Your email address will be deleted from my email account at the same time.

I will keep your name and telephone number on my business phone for a period of 8 years after our work finishes to maintain continuity if you return to me for further advice or treatment. After this time, I will delete your name and telephone number from my business phone. Text messages will be deleted when you finish therapy with me.

How I may process/share your personal information:

Only I will have automatic access to your data, and I will never sell this or use it for unethical reasons. It is very unlikely I will share it unless:-

• My notes are subpoenaed by a court of law.
• If you or anyone you tell me about is at harm or risk of harm, I may have to share information.
• I have regular supervision as required by the National Council for Hypnotherapy (NCH) where I talk about my work, but I will never use your name without your permission.
• Your name and contact details would be shared with my Therapeutic Executor in the event of my death if you are still in therapy with me and they will contact you to inform you of the situation.
• If your health is in jeopardy whilst in a session, I may share your name and contact information with an emergency healthcare service.
• If I become aware of your intent to cause harm to another person/organisation (e.g. terrorism) the law may require me to inform an authority without seeking your permission and without your knowledge.

Your Rights under the GDPR agreement:

You have the following rights;

• The right to be informed what information I hold (this document).
• The right to see the information I hold about you (free of charge for the initial request) subject to timescales within the regulations.
• The right to rectify any inaccurate or incomplete personal information.
• The right to withdraw consent to me using your personal information.
• The right to request your personal information be erased/deleted.
• The right to data portability.
• The right to object.
• The right not to be subject to automated decision-making including profiling.

You can contact LB Wellness Practice by email on info@lbwellnesspractice.co.uk