I intend to ensure that any data you provide is kept secure, managed respectfully and only used for the purposes for which it has been provided. This policy will be updated periodically in line with current legislation.

 

Organisation: Curious Flamingos

Data controller: Alison Easton

Contact: via contact form on Contact page or Telephone: 07773 256903

 

​

What information do I collect when you make an initial enquiry and how do I use this information?

​

When you contact me via my website, phone or email I will collect your:

• name

• email address

• telephone number

• any information you choose to supply regarding the purpose of your enquiry

 

I use this information in order to make contact with you to discuss your requirements. I may also use this information so that I may improve my services. I will use your email address to arrange appointments and, if necessary, send you a link to make payment via PayPal. For the purposes of clarity, I do not receive or retain your bank details. Please also refer to PayPal’s Privacy Policy.

 

​

What information do I collect at your initial appointment and how do I use this information?

​

I will ask you for:

• your GP contact details and some basic health information: there are some conditions that are contra-indicated for hypnotherapy and sometimes there are circumstances where it may be necessary for you to contact your GP before commencing therapy. I will inform you of this during a phone consultation or at our appointment should this appear appropriate.

 

• your home address and date of birth. This information would be used as identifying data if it was necessary for me to contact your GP.  

 

I will always seek your consent before contacting your GP unless I am concerned about your welfare and not to do so would put you at risk or you are incapable of providing consent. (Please see ‘right to restrict procession’ below).

 

• an emergency contact: only to be used in an emergency with your consent or without your consent if you are not capable of providing consent.

 

If you wish, you may provide an additional/alternative email address for the purpose of our communicating between sessions.

 

You do not have to consent to the collection of information, however, if you choose not to provide it, I may not be able to work with you.

​

 

What other information do I collect throughout the course of our sessions and how do I use this information?

​

In your initial session I will take a case history relating to your presenting issue(s). This information may be supplemented during the course of our sessions. I will also ask for information regarding your therapy goals: evidence that would let you know that the problem was resolved. I will use this information to plan bespoke therapy sessions: this includes deciding which interventions to apply during the sessions and creating suggestions that are tailored to you.

 

During interventions, I will make note of pertinent information. This assists me in guiding the therapy session and providing suggestions that are tailored to you.

 

I will ask about changes that you have noticed. This information enables me to direct the course of the therapy session according to your needs.

 

I may ask for feedback about the sessions. You are welcome to provide feedback at any time. This information helps me to adapt my sessions to your needs and improve my skills.

 

This information is collected in confidence and will be used as you would reasonably expect. (Please see ‘right to restrict procession’ below).  

 

​

What is my lawful basis for processing?

​

The lawful basis for processing your data is as follows:

​

Activity - Lawful basis

Collecting data submitted as an enquiry - Contract

Booking appointments - Contract

Carrying out therapy sessions - Contract

Contacting your GP - Consent, Vital interests                                                  

Referral to another healthcare practitioner - Consent            

Retention of personal data - Legitimate interests     

​​​           ​​​

 

Special category data?

​

Throughout the course of our sessions, I may collect special category data. This is personal data that the GDPR says is more sensitive and requires more protection. Special category data that I may collect include: health, religion, ethnic origin, race, sexual orientation, sex life. I will only collect this information where it is relevant to the therapy and presenting issue.

 

The lawful basis and condition for processing special category data is set out in the table below:

 

Lawful basis - Condition

Contract - For the provision of healthcare

 

​

What are your rights?

​

Under the General Data Protection Regulations which are effective from 25th May 2018 you have the following rights:

​

• the right to be informed:

This is the purpose of this privacy notice.

 

• the right of access:

If you wish to see personal data that I hold about you then please submit a request to me and I will provide you with the data within 1 calendar month of your request.

 

• the right to rectification:

This is your right to request changes to any information I hold that is factually inaccurate. If you believe any of the information I hold on you is incorrect then please let me know as soon as possible and I will review your request and respond within 1 calendar month.

 

• the right to erasure:

Given the nature of our work I am required to hold your details for a period of 8 years from the date of your last session; or if you are age 16 at cessation of treatment I am required to hold your details until your 25th birthday; or if you are age 17 at the cessation of treatment I am required to hold your records until your 26th birthday. After this time your information will be securely destroyed.

 

• the right to restrict processing:

I will only use the information for the purposes that I have stated above. I uphold the common law principles of confidentiality where the duty to keep confidence is measured against the concept of ‘greater good’. If in my opinion as a therapist there is good reason to believe not to disclose would cause danger or serious harm to self, the therapist or others then your GP or other appropriate agencies may be contacted. Only information required to ensure safety of relevant parties would be disclosed. Information may have to be disclosed without consent for the prevention, detection or prosecution of a crime. The sharing of anonymous case histories with supervisors and peer supervision groups is not a breach of professional confidentiality. Where you have been referred to me by another healthcare practitioner, it may be necessary to share relevant information with them in provision of your ongoing care.

 

• the right to data portability:

This right is more relevant to IT companies e.g. the sharing of information when moving from one utility provider to another. I will not share your information without your specific consent, other than in the situations described above.

 

• the right to object:

I will not contact you for marketing purposes unless you have given me specific consent to do so.

 

• the right not to be subject to automated decision-making including profiling:

I will not use your information for profiling purposes.

 

​

Cookies

​

Cookies are small files which ask your permission to be placed on your computer's hard drive so that it can analyse web traffic to my website. Through this I can see which of my website's pages are being viewed. Most web browsers automatically accept cookies but you can modify your setting to decline them if you prefer. If you choose to do this you may find that you cannot make full use of my website.

 

​

Links to other websites

​

My website may contain links to other websites of interest. However, once you use these links please be aware that you have left my website and I do not have any control over other websites. I cannot be held responsible for the protection and privacy of any information which you provide when visiting such sites and these sites are not governed by my privacy policy. Please exercise caution and look at the privacy statement applicable to the website you are visiting.

 

 

 

ICO Registration No: Z2980983

Privacy Notice last updated: 30th Apr 2025