Privacy Statement

Website Privacy Policy

1.This Privacy Policy is Chesterfield Hypnobirthing official online privacy policy. Chesterfield Hypnobirthing is a trading name of Brampton Therapy Centre and it applies to all personal information collected by Chesterfield Hypnobirthing. Please note: where individual Therapist’s are self-employed, they will be the “data controller” for your personal information, which will be stored as per their GDPR procedures and Privacy Policy, not Chesterfield Hypnobirthing procedures and policy. In this policy we explain how and why Chesterfield Hypnobirthing collects your personal information, how we use it, and what controls you have over our use of it.

2.Chesterfield Hypnobirthing is committed to complying with General Data Protection Regulation (GDPR) governing privacy of personal information by businesses and to protecting and safeguarding your privacy when you deal with us. We will never disclose your personal information to any third party unless we have your permission to do so, or as is otherwise required under section 7 of this Privacy Policy notice.

Collection of information

3.Some information provided to us by clients, customers, contractors and other third parties might be considered private or personal. Without these details we would not be able to carry on our business and provide our services to you. We will only collect such personal information if it is necessary for one of our functions or activities.

4.Personal information is collected from people in the following situations by Chesterfield Hypnobirthing:

           .a) If you contact Chesterfield Hypnobirthing, we may keep a record of the correspondence and your contact details.

            b) If you submit a contact form, we and our internet provider may keep a record of that correspondence.

           .c) during consultations and/or booking forms and/or treatment questionnaires.

5. At or before the time the personal information is collected by us we will take reasonable steps to ensure that you are made aware of who we are, the fact that you are able to gain access to the information held about you, the purpose of the collection, the type(s) of organisations to which we usually disclose the information collected about you, any laws requiring the collection of the information and the main consequences for you if all or part of the information is not collected.

Use of information collected and disclosure of personal information to others

6.We may use or disclose personal information held about an individual for the primary purpose for which it is collected (e.g. provision of our services, including administration of our services, notification to you about changes to our services, record-keeping following termination of our services to you and technical maintenance).

The following people will have routine access to your data:

         .a) Your practitioner(s), in order that they can provide you with treatment

         .b). Reception staff for diary purposes and other administrative staff, such as the book keeper and accountant (they will not have access to medical history or sensitive personal information)

         .c). We may also use such information for a purpose related to the primary purpose of collection and where it would reasonably be expected by you that we would use the information in such a way. This information is only disclosed to persons outside our business in the circumstances set out in this policy or as otherwise notified to you at the time of collection of the information.

        .d). We also use Mailchimp to coordinate our messages, so your name and email address may be saved on their server.

We will never share your data with anyone who does not need access without your written consent.

7.in addition, we are permitted to use or disclose personal information held about you:

         .a) Where you have consented to the use or disclosure

         .b) Where we reasonably believe that the use or disclosure is necessary to lessen or prevent a serious, immediate threat to someone's health or safety or the public's health or safety

         .c) Where we reasonably suspect that unlawful activity has been, is being or may be engaged in and the use or disclosure is a necessary part of our investigation or in reporting the matter to the relevant authorities

         .d) Where such use or disclosure is required under or authorised by law (for example, to comply with a subpoena, a warrant or other order of a court or legal process)

         .e) Where we reasonably believe that the use or disclosure is reasonably necessary for prevention, investigation, prosecution and punishment of crimes or wrongdoings or the preparation for, conduct of, proceedings before any court or tribunal or the implementation of the orders of a court or tribunal by or on behalf of an enforcement body.

Links

8.Our web site may contain links to other web sites and those third-party web sites may collect personal information about you. We are not responsible for the privacy practices of other businesses or the content of web sites that are linked to our web site. Chesterfield Hypnobirthing encourages users to be aware when they leave the site and to read the privacy statements of each and every web site that collects personally identifiable information.

Security and storage

9.Chesterfield Hypnobirthing places significant importance on the security of all information associated with our customers and contractors. We have security measures in place to protect against the loss, misuse and alteration of personal information under our control.

10.Due to the nature of our business we have a legal obligation to retain your consultation records for 8 years after your most recent appointment (or age 25, if this is longer), after this period you can ask us to delete your records if you wish. Otherwise, we may retain your records indefinitely in order that we can provide you with the best possible care should you return at a future date.

11. Your records are stored:

         . a) On paper, in locked filling cabinets, locked drawers or locked cupboards.

         .b). Electronically (eg “in the cloud”). Our providers have given us their assurances that they are fully compliant with the General Data Protection Regulations. Access to this data is password protected and the passwords are changed regularly.

         .c). On our office computers. These are password-protected and backed up regularly.

12.Personal information is de-identified or destroyed securely when no longer required by us.

13.Chesterfield Hypnobirthing retains the information you provide to us including possibly your contact and credit card details to enable us to verify transactions and customer details and to retain adequate records for legal and accounting purposes. This information is held in locked filing cabinets and/or on secure servers in controlled facilities by our pdr provider.

14.Information stored within our computer systems can only be accessed by those entrusted with authority and computer network password sanctions.

15.No data transmission over the Internet can be guaranteed to be 100 per cent secure. As a result, while we strive to protect user's personal information, Chesterfield Hypnobirthing cannot ensure or warrant the security of any information transmitted to it or from its online products or services, and users do so at their own risk. Once Chesterfield Hypnobirthing receives your transmission, it makes every effort to ensure its security on its systems.

14.Ultimately, you are solely responsible for keeping your passwords and/or account information secret. You should be careful and responsible whenever you are online.

Access to and correction of personal information

15.Chesterfield Hypnobirthing is committed to maintaining accurate, timely, relevant and appropriate information about our customers and web-site users.

16.So long as your request for your personal information is in accordance with the General Data Protection Regulation (GDPR), then we will give you access to that information.

17.Inaccurate information will be corrected upon receiving advice to this effect from you. To ensure confidentiality, details of your personal information will be passed on to you only if we are satisfied that the information relates to you..

18.If we refuse to provide you with access or correct the personal information held about you by us, then we will provide reasons for such refusal.

Complaints

19.If you have a complaint about our Privacy Policy or the collection, use or safe disposal or destruction of your personal information, your complaint should be directed in the first instance to us at E-mail: [email protected]

20.We will investigate your complaint and attempt to resolve any breach that might have occurred in relation to the collection, use or destruction of personal information held by us about you in accordance with the General Data Protection Regulation (GDPR). If you are not satisfied with the outcome of this procedure, then you may request that an independent person (usually the Information Commissioner's Office) investigate your complaint.

Cookies

21.Chesterfield Hypnobirthing collects information from the site using "IP files".

22.When you visit Chesterfield Hypnobirthing’s site to read, browse or download information, our system will record/log your IP address (the address which identifies your computer on the internet and which is automatically recognised by our web server), date and time of your visit to our site, the pages viewed and any information downloaded. This information will only be used for the purpose of site analysis and to help us offer you improved online service. We may automatically collect non-personal information about you such as the type of Internet browsers you use or the site from which you linked to our Web Sites. You cannot be identified from this information and it is only used to assist us in providing an effective service on our Web Sites.

Changes to Privacy Policy

23.If Chesterfield Hypnobirthing changes its Privacy Policy, it will post changes on this Privacy Policy page so that users are always aware of what information is collected, how it is used and the way in which information may be disclosed. As a result, please remember to refer back to this Privacy Policy regularly to review any amendments.

Contacting us

24.If you require further information regarding our Privacy Policy, please contact us at the following address: E-mail: [email protected]

25.Should you wish to read more information on privacy legislation or the General Data Protection Regulation (GDPR) we recommend that you visit the Information Commissioner's Office at https://ico.org.uk/

Acceptance

26.You accept that your use of this site includes your acceptance of this Privacy Policy and the Terms of Use.

Version 1 - 15 May 2018