The General Data Protection Regulation (GDPR)2018 aims to ensure the secure and private storage of personal data. Please find below information on how I, Oliver Luehr, as your Solution Focussed Hypnotherapist in private practice, will store and handle your data to fully comply with the UK’s GDPR. Any information needed regarding your data can be obtained by contacting me via email at hello@hypnotherapy.com

What information will you hold?

To aid our work together, the information I hold includes: Name, address, phone number, email, Date of birth, GP details (where clinically appropriate), Session notes, assessments, background information relevant to therapy, payment or invoicing details

What are your reasons for collecting this information?

I hold your data for administrative purposes, such as arranging sessions, managing appointments, and billing, and for clinical purposes, such as providing safe and effective therapy and maintaining accurate records in line with professional obligations. Under UK GDPR, my lawful basis for processing personal data includes the contract you signed to participate in hypnotherapy.

How long will you keep my information?

To comply with my professional insurance requirements, the records shall be kept securely for 7 years following the last occasion on which treatment was provided. In the case of treatment of minors, records should be kept for at least 7 years after they reach the age of majority (18).

What if I would like my data to be destroyed before this date?

Under GDPR’s ‘The right of erasure’, you have the right to request the deletion of any of your records at any time, and can do so by contacting me via email.

Can I see or get a copy of the information you hold?

In accordance with GDPR’s‘The right of access’, you have the right to access and obtain a copy of your information within 30 days.

How do I know that you will store my information securely?

All your data will be stored on a GDPR- and EU Cloud Code of Conduct-compliant online platform that is password-protected, and only I, as your hypnotherapist, have access to the password.

Are our discussions within the hypnotherapy sessions confidential?

Yes, confidentiality is maintained. An exemption would only be made in need for supervision support or if there is a belief that you may harm yourself or others.

What if I see you outside of a hypnotherapy session?

Should you see me outside a Hypnotherapy session, I will maintain confidentiality by not approaching you. If you'd like to speak with me, you may approach me at any time; you are always welcome to do so.

Will you discuss information about me with other health and social care

professionals?

Information will only be shared with other health and social care professionals with your written consent.

Who is the Data Controller, and what is their Information Commissioner's Office (ICO) registration number?

I, Oliver Luehr, as your hypnotherapist, will be the Data Controller. My ICO registration number is: ZB908649