What is the General Data Protection Regulations, 2018 (GDPR) and how does it affect me?
The GDPR replaces the 1998 Data Protection Act to ensure your personal and sensitive, confidential data is kept private and held securely, being processed in the way that you have agreed to. It is there to protect your rights as a consumer of a service or product that might involve your identifiable data, e.g. your name and address or whether you have a specific condition. It also covers any session records, text messages or emails we exchange. For more information you can read the policy documents accessible on www.cherryblossombirths.co.uk or on request.
How long will you hold my information for?
I am insured by Holistic Insurance which stipulates I must hold your data for 5 years after your final interaction with Cherry Blossom Births.
What if I don’t want my records to be held for that long?
Under the GDPR you can make a request in writing to me, for all your records to be deleted. In this case all your paper records would be shredded with a cross shredding machine and any electronic data such as emails or text messages would be permanently deleted from the devices they are stored on. I would have to save the request for deletion you made but would not save any other data. In some circumstances my insurance companies legal team may want to verify information I process.
Why do you need to record this information?
I collect information about; why you are using the service, a small amount of medical information and a small amount of information about your important others, alongside brief session notes. This information enables me to provide a high quality service to you, ensuring I am equipped with the knowledge of our previous discussions prior to a course. Your contact details / address will only be used with your explicit consent. See consent form below.
I also have some third party services that collects information that cannot identify you, when you visit my website. This lets me know how many visitors visit my website, what country they are from, and how long they spend visiting my website.
What lengths are made to ensure my information is held securely?
Hardcopy documents – Are all stored in a locked cabinet in a locked room.
Text messages – My phone is secured with a pin code.
Emails – My email account requires a user name and password.
Electronic documents – Any electronic documents e.g. an invoice or enrolment form, are password protected and stored on an external hard drive device (USB) which when not in use is locked away in a secure cupboard if they contain personal or sensitive information.
Is what we discuss kept confidential?
Everything we talk about during our interaction is strictly confidential between you and me. To ensure I am doing my job effectively and that I have the right support, I may discuss elements of our conversations with fellow hypnobirthing teachers in a secure online group. During these discussions I do not disclose any details that may identify you, and all members of this group also adhere to the GDPR.
What about other Health and Social Care Professionals?
As I adhere to the GDPR any contact, relating to you, with other health care professionals would only be made with your signed consent.
In order to safeguard you and the people around you, if you were to disclose that you were going to carry out harm to yourself or someone else, then under my “Duty of Care” I am obligated by law to inform the relevant authorities. This is to support you to live well, and I would always aim to discuss this with you prior to contacting anyone.
If I was issued with a police warrant or court order for your information, by law I would also have to provide them with your information.