I am committed to maintaining comprehensive records pertaining to your health and the treatment intervention provided for a duration of eight years following the conclusion of our professional engagement. This includes the retention of your last known contact details, which are essential for addressing any matters related to your treatment throughout this period. After the specified timeframe, these records will be securely destroyed. 

I am ICO registered and in accordance with the General Data Protection Regulations (GDPR) which came into effect on 25th May 2018, I have conducted a thorough review of my practice, privacy policy, and terms of engagement to ensure full compliance. Updates to policies and terms will be made as required, with the most current versions published on my website. I welcome any feedback you may wish to provide. 

I adhere to the Code of Practice established by the National Hypnotherapy Society Code of Practice. Data protection is a significant concern and is also governed by the Human Rights Act 1988 and may be influenced by the Equalities Act 2010. 

Given the complexity of data protection law, I take my obligations in this area with utmost seriousness. All employees and contractors privy to any data are fully informed of their legal duties to uphold strict confidentiality and are aware of the detailed requirements of the professional codes to which I adhere. 

Secure Data Storage

Your records are initially maintained using secure IONOS HiDrive Software accessible solely by myself. IONOS HiDrive software has end-to-end encrytion. HiDrive cloud storage is GDPR compliant and meets high security standards. When data is transferred, it is encrypted using AES-256 encryption via SSL. For storage, HiDrive uses AES-128 encryption.

Any documentation sent by email is password protected, passwords being sent separately via other electronic means e.g. SMS. Upon the completion of your treatment, all records are transferred to secure IONOS HiDrive software storage, again only accessible to me. At no point is data stored electronically outside of secure IONOS HiDrive software following the completion of your treatment. My client database consists solely of your contact information and financial-related matters, which is accessed only by myself. 

Use of Your Data in Daily Operations

I record your name and contact details within my secure iCloud calendar. 

Use of Your Data During Sessions

I document your date of birth, presenting issues, session dates, and related details along with any assessment documentation and my personal notes from each session. Such records are instrumental in tracking progress and evaluating the efficacy of the therapeutic interventions employed during your treatment.  

Use of Your Contact Data Post-Treatment

My hypnotherapy practice is designed as a brief intervention, concluding naturally once your issues are resolved or if we agree that further progress is unfeasible. Your contact information will not be disclosed outside of the practice of Walker's Therapy unless compelled by statutory obligations, public interest, or other legal processes. You retain the right to alter or revoke any permissions granted by notifying me in writing or via email at any time. I will consistently seek your explicit and informed consent for any future use of your data and will maintain a detailed record of such consents within a database that tracks permissions as documented in both your and my copies of the Terms of Engagement. Consent examples may include permission to send a newsletter, share pertinent articles, or follow up on your progress after a set period—feedback which I value greatly as it aids in the continuous improvement of my practice.

Your Right to Access Your Records

I recognise the importance of privacy and security concerning your personal information. All individual records will be made available to you upon reasonable request, with five business days regarded as an appropriate notice period unless urgent circumstances necessitate earlier access. Prior to releasing your records, I will verify your identity through documentation such as a passport or driving licence. Should you identify any inaccuracies in the information held, please inform me so that I can make the necessary corrections.