PRIVACY POLICY

---

This Privacy Notice explains how Richard Taylor Psychotherapy (“we,” “us,” or “our”) collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR). Your privacy is important to us, and we are committed to safeguarding your personal information.

What Data We Collect

We may collect and store the following personal data:

• Personal Information: Name, date of birth, address, email address, and phone number.
• Health Information: Relevant medical history, details about your current health, and any information shared during sessions.
• GP Information: Name and contact details of your General Practitioner (GP).
• Session Notes: Brief, anonymised notes for the purpose of tracking your progress and ensuring quality of service.

How We Use Your Data

Your personal data is used for the following purposes:

• To provide you with effective therapy sessions tailored to your needs.
• To manage and maintain your client records.
• To communicate with you regarding appointments or session changes.
• To contact your GP in the rare event of an emergency.
• To comply with legal obligations or professional standards

How Long We Hold Your Data

In accordance with the guidelines of the National Council for Hypnotherapy (NCH), your records will be stored securely for 8 years after the last interaction for adult clients. For clients under 18, records will be retained until they reach the age of 25. This retention period is required by our insurance policy and professional standards.

Requesting Data Deletion

Due to the sensitive nature of our work, we are unable to delete client records before the end of the required retention period as mandated by our insurance policy.

Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of your personal data that we hold, and we will respond within 30 days.
• Right to Rectification: You can request corrections to any inaccurate or incomplete data.
• Right to Restrict Processing: You can request limitations on how your data is used.
• Right to Data Portability: You can request that your data be transferred to another provider.

To exercise any of these rights, please contact us at info@richardtaylortherapy.com

Data Security

We take your data security seriously. Your personal data is stored securely in both electronic and paper formats. Electronic records are double password protected with encrypted software, and paper records are kept in a locked file in a secure location. We ensure that your information is handled with the highest level of confidentiality.

Confidentiality of Sessions

All discussions within our sessions are strictly confidential. The only exceptions are:

• If there is a risk of harm to yourself or others.
• If I require support from my supervisor (discussed anonymously).
• If required by law.

Contact Outside of Sessions

If we encounter each other outside of a therapy session, I will respect your privacy and maintain confidentiality. I will not initiate contact or discuss therapy matters unless you do so first.

Sharing Your Information with Other Professionals

I will not share your information with other health or social care professionals without your explicit written consent, except in emergency situations where it is necessary for your safety.

Data Controller and ICO Registration

As the data controller, I am responsible for ensuring that your data is handled in accordance with GDPR. My ICO registration reference is ZB814504

Updates to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. You will be notified of any significant changes.

Contact Information

If you have any questions or concerns about this Privacy Notice or how your data is handled, please contact:

Richard Taylor
E mail: info@richardtaylortherapy.com