name of Brampton Therapy Centre and it applies to all personal information
collected by Chesterfield Hypnobirthing. Please note: where individual Therapist’s are self-employed,
they will be the “data controller” for your personal information, which will be
procedures and policy. In this policy we explain how and why Chesterfield Hypnobirthing
collects your personal information, how we use it, and what controls you have
over our use of it.
2.Chesterfield Hypnobirthing is committed to complying with
General Data Protection
governing privacy of personal information by businesses and to protecting and
safeguarding your privacy when you deal with us. We will never disclose your
personal information to any third party unless we have your permission to do
Collection of information
3.Some information provided to us by clients, customers,
contractors and other third parties might be considered private or personal.
Without these details we would not be able to carry on our business and
provide our services to you. We will only collect such personal information
if it is necessary for one of our functions or activities.
4.Personal information is collected from people in the
following situations by Chesterfield Hypnobirthing:
.a) If you contact Chesterfield Hypnobirthing, we may
keep a record of the correspondence and your contact details.
b) If you submit a
contact form, we and our internet provider may keep a record of that
during consultations and/or booking forms and/or treatment questionnaires.
5.At or before the time the personal information is
collected by us we will take reasonable steps to ensure that you are made
aware of who we are, the fact that you are able to gain access to the
information held about you, the purpose of the collection, the type(s) of
organisations to which we usually disclose the information collected about
you, any laws requiring the collection of the information and the main
consequences for you if all or part of the information is not collected.
Use of information collected and
disclosure of personal information to others
6.We may use or disclose personal information held about
an individual for the primary purpose for which it is collected (e.g.
provision of our services, including administration of our services,
notification to you about changes to our services, record-keeping following
termination of our services to you and technical maintenance).
The following people will have routine access to your
practitioner(s), in order that they can provide you with treatment
staff for diary purposes and other administrative staff, such as the book
keeper and accountant (they will not have access to medical history or
sensitive personal information)
.c). We may also
use such information for a purpose related to the primary purpose of
collection and where it would reasonably be expected by you that we would use
the information in such a way. This information is only disclosed to persons
outside our business in the circumstances set out in this policy or as otherwise
notified to you at the time of collection of the information.
.d). We also use Mailchimp to coordinate our
messages, so your name and email address may be saved on their server.
We will never share your data with anyone who does not
need access without your written consent.
7.in addition, we are permitted to use or disclose personal
information held about you:
you have consented to the use or disclosure
we reasonably believe that the use or disclosure is necessary to lessen or
prevent a serious, immediate threat to someone's health or safety or the
public's health or safety
we reasonably suspect that unlawful activity has been, is being or may be
engaged in and the use or disclosure is a necessary part of our
investigation or in reporting the matter to the relevant authorities
such use or disclosure is required under or authorised by law (for example,
to comply with a subpoena, a warrant or other order of a court or legal
we reasonably believe that the use or disclosure is reasonably necessary
for prevention, investigation, prosecution and punishment of crimes or
wrongdoings or the preparation for, conduct of, proceedings before any
court or tribunal or the implementation of the orders of a court or
tribunal by or on behalf of an enforcement body.
8.Our web site may contain links to other web sites and
those third-party web sites may collect personal information about you. We
are not responsible for the privacy practices of other businesses or the
content of web sites that are linked to our web site. Chesterfield
Hypnobirthing encourages users to be aware when they leave the site and to
read the privacy statements of each and every web site that collects
personally identifiable information.
Security and storage
9.Chesterfield Hypnobirthing places significant importance
on the security of all information associated with our customers and
contractors. We have security measures in place to protect against the loss,
misuse and alteration of personal information under our control.
10.Due to the nature of our business we have a legal
obligation to retain your consultation records for 8 years after your most
recent appointment (or age 25, if this is longer), after this period you can
ask us to delete your records if you wish.
Otherwise, we may retain your records indefinitely in order that we can
provide you with the best possible care should you return at a future date.
11. Your records are stored:
. a) On paper, in locked filling cabinets, locked
drawers or locked cupboards.
.b). Electronically (eg “in the cloud”). Our providers have given us their assurances
that they are fully compliant with the General Data Protection Regulations.
Access to this data is password protected and the passwords are changed
.c). On our office computers. These are password-protected and backed up
12.Personal information is de-identified or destroyed
securely when no longer required by us.
13.Chesterfield Hypnobirthing retains the information you
provide to us including possibly your contact and credit card details to
enable us to verify transactions and customer details and to retain adequate
records for legal and accounting purposes. This information is held in locked filing cabinets
and/or on secure servers in controlled facilities by our pdr provider.
14.Information stored within our computer systems can only
be accessed by those entrusted with authority and computer network password
15.No data transmission over the Internet can be guaranteed
to be 100 per cent secure. As a result, while we strive to protect user's
personal information, Chesterfield Hypnobirthing cannot ensure or warrant the
security of any information transmitted to it or from its online products or
services, and users do so at their own risk. Once Chesterfield Hypnobirthing receives
your transmission, it makes every effort to ensure its security on its
14.Ultimately, you are solely responsible for keeping your
passwords and/or account information secret. You should be careful and
responsible whenever you are online.
Access to and correction of personal
15.Chesterfield Hypnobirthing is committed to maintaining
accurate, timely, relevant and appropriate information about our customers
and web-site users.
16.So long as your request for your personal information is
in accordance with the General Data Protection Regulation (GDPR), then we
will give you access to that information.
17.Inaccurate information will be corrected upon receiving
advice to this effect from you. To ensure confidentiality, details of your
personal information will be passed on to you only if we are satisfied that
the information relates to you..
18.If we refuse to provide you with access or correct the
personal information held about you by us, then we will provide reasons for
collection, use or safe disposal or destruction of your personal information,
your complaint should be directed in the first instance to us at E-mail: firstname.lastname@example.org
20.We will investigate your complaint and attempt to resolve
any breach that might have occurred in relation to the collection, use or
destruction of personal information held by us about you in accordance with
the General Data Protection Regulation (GDPR). If you are not satisfied with
the outcome of this procedure, then you may request that an independent
person (usually the Information Commissioner's Office) investigate your
21.Chesterfield Hypnobirthing collects information from the
site using "IP files".
22.When you visit Chesterfield Hypnobirthing’s site to read,
browse or download information, our system will record/log your IP address
(the address which identifies your computer on the internet and which is
automatically recognised by our web server), date and time of your visit to
our site, the pages viewed and any information downloaded. This information
will only be used for the purpose of site analysis and to help us offer you
improved online service. We may automatically collect non-personal
information about you such as the type of Internet browsers you use or the
site from which you linked to our Web Sites. You cannot be identified from
this information and it is only used to assist us in providing an effective
service on our Web Sites.
aware of what information is collected, how it is used and the way in which
information may be disclosed. As a result, please remember to refer back to
25.Should you wish to read more information on privacy
legislation or the General Data Protection Regulation (GDPR) we recommend
that you visit the Information Commissioner's Office at https://ico.org.uk/
26.You accept that your use of this site includes your
Version 1 - 15 May 2018