
Privacy Policy
Andrea Aro Hypnotherapy is committed to protecting your privacy. To enable me to provide the highest level of service I keep records that contain information about you and your health, and the care and treatment I have provided or plan to provide to you. I am committed to being fair, transparent and open.
​
This Privacy Policy explains Who I am, How I receive information about you, and What I do with that information once we have it.
​
I may make changes to the policy from time to time. Any changes will be updated on the website.
Who I am
I am Andrea Aro Hypnotherapy, which is a trading name for Andrea Arogyaswamy DHypPsych(UK) GQHP, trading from 3 Elwood Close, Burgess Hill, West Sussex, UK. I am the ‘data controller’ for the purposes of the Data Protection Act 1998 and (from 25 May 2018) the EU General Data Protection Regulation 2016/679 (“Data Protection Law”). This means I am responsible for how I use your personal information.
The Information I Collect
I collect personal information:
​
-
directly from you
-
from a third party acting on your behalf with your consent e.g. a GP, Psychiatrist or mental health professional
-
when I generate it myself e.g. patient assessment notes
-
from publicly available sources
The information I collect from you is considered a special category of personal data and I process this information in accordance with Article 9 section (iii) the provision of Health or Social Care. GDPR requires obligations of confidentiality which is covered by the ‘therapists code of conduct’.
How I will use your information
I will use your information in order to provide therapy services to you. I will only use information collected lawfully in accordance with the EU General Data Protection Regulation 2016/679 (“Data Protection Law”) and will not use any information I may hold about you for any purpose other than that for which it was collected, unless we have gained your consent. I do not sell personal information.
Who I can share your information with
I have a legal obligation to share information with you upon request. With your consent, I may share your information with other organisations I work in partnership with such as the CCG.
​
There are, however, some instances where patients cannot opt out of having their information shared and this information may be shared without explicit or implied consent. These instances may include:
​
-
Where the sharing is mandated by law or court order
-
Where there are sufficient safeguarding or vulnerability concerns
-
For the health and safety of others.
How long I will keep your information
I’ll keep your information in a safe and secure environment for as long as you have a relationship with us and then for 5 years.
Your rights
You have a number of rights relating to your information e.g. to see what I hold, to ask me to share it with another party, ask me to update incorrect or incomplete details, to object to or restrict processing of it, to make a complaint etc.
​
If you have any further questions after reading this notice, please contact me.