Privacy Policy
Andrea Aro Hypnotherapy is committed to protecting your privacy. To enable me to provide the highest level of service I keep records that contain information about you and your health, and the care and treatment I have provided or plan to provide to you. I am committed to being fair, transparent and open.
This Privacy Policy explains Who I am, How I receive information about you, and What I do with that information once we have it.
I may make changes to the policy from time to time. Any changes will be updated on the website.
Who I am
I am Andrea Aro Hypnotherapy, which is a trading name for Andrea Arogyaswamy DHypPsych(UK) GQHP, trading from135-137 High Street, Hurstpierpoint, West Sussex, BN6 9PU. I am the ‘data controller’ for the purposes of the Data Protection Act 1998 and (from 25 May 2018) the EU General Data Protection Regulation 2016/679 (“Data Protection Law”). This means I am responsible for how I use your personal information.
The Information I Collect
I collect personal information:
-
directly from you
-
from a third party acting on your behalf with your consent e.g. a GP, Psychiatrist or mental health professional
-
when I generate it myself e.g. patient assessment notes
-
from publicly available sources
The information I collect from you is considered a special category of personal data and I process this information in accordance with Article 9 section (iii) the provision of Health or Social Care. GDPR requires obligations of confidentiality which is covered by the ‘therapists code of conduct’.
How I will use your information
I will use your information in order to provide therapy services to you. I will only use information collected lawfully in accordance with the EU General Data Protection Regulation 2016/679 (“Data Protection Law”) and will not use any information I may hold about you for any purpose other than that for which it was collected, unless we have gained your consent. I do not sell personal information.
Who I can share your information with
I have a legal obligation to share information with you upon request. With your consent, I may share your information with other organisations I work in partnership with such as the CCG.
There are, however, some instances where patients cannot opt out of having their information shared and this information may be shared without explicit or implied consent. These instances may include:
-
Where the sharing is mandated by law or court order
-
Where there are sufficient safeguarding or vulnerability concerns
-
For the health and safety of others.
How long I will keep your information
I’ll keep your information in a safe and secure environment for as long as you have a relationship with us and then for 5 years.
Your rights
You have a number of rights relating to your information e.g. to see what I hold, to ask me to share it with another party, ask me to update incorrect or incomplete details, to object to or restrict processing of it, to make a complaint etc.
If you have any further questions after reading this notice, please contact me.