I am committed to protecting your privacy and being transparent about how I handle your data. As a Clinical Hypnotherapist and Psychotherapist, I treat your personal information with the same level of confidentiality as our therapeutic sessions.
Data Controller
The Data Controller for this website (deborahjkelly.com) and my practice is Deborah J. Kelly. You can contact me at [email protected] for any data-related queries.
Information I Collect
I collect and process data in two capacities:
Newsletter & Website: When you sign up for my newsletter via MailerLite (or other plugin) or contact me through the website, I collect your name and email address.
Clinical Practice: If you engage in therapy, I collect “Special Category Data,” which includes health information, session notes, and contact details. This is collected under the “Lawful Basis” of providing healthcare and your explicit consent. I keep minimum notes.
How I Use Your Data
To stay in touch: I use your email to send you my newsletter, insights, and updates about my work.
To provide therapy: I use your clinical data to provide professional hypnotherapy and psychotherapy services.
Professional Obligations: To meet the ethical standards of the ICHP (Institute of Clinical Hypnotherapy & Psychotherapy) as well as ARCHTI and Irish law.
Data Retention (How long I keep it)
Newsletters: I keep your email as long as you are subscribed. You can click “Unsubscribe” at any time, and your data will be removed.
Clinical Records: In line with professional insurance and legal requirements in Ireland, I typically retain clinical records for 7 years after our final session. After this period, they are securely destroyed.
Third-Party Service Providers
I use a few trusted “processors” to help run my business:
MailerLite or other similar: To manage my newsletter and email list.
Bluehost: My website hosting provider.
And other tools like Stripe/PayPal for payment]: To process secure payments. I never sell, rent, or trade your personal information with third parties for marketing purposes.
Your Rights
Under GDPR, you have the following rights:
Access: You can request a copy of the data I hold about you.
Correction: You can ask me to fix inaccurate information.
Erasure: You can ask me to delete your data (subject to legal retention requirements for clinical notes).
Withdrawal: You can withdraw your consent for marketing at any time.
Security
I use technical and organizational measures (like password-protected files and encrypted devices) to ensure your data is kept safe from unauthorized access.
Cookies
My website uses cookies to improve your browsing experience. You can manage your cookie preferences through your browser settings.
