• Personal identifiers, contacts, and characteristics (for example, name and contact details including email and/or mobile number)

For clients who work with me 1-2-1 for Rapid Transformational Therapy I collect:

• Personal identifiers, contacts, and characteristics (for example, name and contact details including email and/or mobile number)
• Address and short medical history, in case of emergency contact name and number.
• Therapy session notes

How I get the personal information and why I have it

Most of the personal information I process is provided to me directly by you for one of the following reasons:

• Client Consultation Call
• 1-2-1 Rapid Transformational Therapy
• Follow-up client calls
• Joining a group programme
• Purchasing a hypnotic audio programme
• Joining my mailing list

I also receive personal information indirectly, from the following sources in the following scenarios:

• Via my booking system for consultation call purposes
• Via my client intake and consent forms for RTT sessions
• Via Mailchimp for my mailing list purposes
• Via Google Forms for my group programme and hypnotic audio purchases
• Via Stripe for card payment collection

I use the information that you have given me in order to:

• Contact you for your booked calls/Zoom/ RTT in person sessions
• Send you regular emails
• Send you your personalised recording via WhatsApp

I will not share your information with any other parties.

I am obligated to cooperate with local disclosure procedures via local statutory social services concerning any children, young people or any persons with additional needs who I consider to be at risk of suffering significant harm due to physical, sexual, psychological or emotional abuse or neglect. Or if the client is in imminent danger to themselves or others; or if a subpoena of records has been requested.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases I rely on for processing this information are:

(a) Your consent. You have given clear consent for me to process your personal data for a specific purpose. You are able to remove your consent at any time. You can do this by contacting sam@samantha-goddard.com
(b) Contract: the processing is necessary for a contract I hold with you for us to work together.
(c) Legal obligation: the processing is necessary for me to comply with the law (not including contractual obligations).
(d) Vital interests: the processing is necessary to protect someone’s life.
(e) Public task: the processing is necessary for me to perform a task in the public interest or for my official functions, and the task or function has a clear basis in law.
(f) Legitimate interests: the processing is necessary for legitimate interests.

How I store your personal information

Your information is securely stored in a password protected, two factor authorisation online system. Which I access via a password protected computer. Your written notes are kept in a locked filing cabinet.

I keep your personal information including session notes for 8 years. After which it will be shredded and disposed of. Personal information that has been stored electronically will be deleted.

Your data protection rights

Under data protection law, you have rights including:
Your right of access - You have the right to ask for copies of your personal information.
Your right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
Your right to erasure - You have the right to ask me to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask me to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave me to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you. Please contact us at sam@samantha-goddard.com if you wish to make a request.

How to complain

If you have any concerns about my use of your personal information, you can make a complaint to me at sam@samantha-goddard.com

You can also complain to the ICO if you are unhappy with how I have used your data.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk