Privacy Policy

---

Effective Date: from 1 July 2021

This Privacy Policy explains how I, Cathy Hargreaves, collect, use and disclose your personal data, and your rights in relation to the personal data I hold.

I am a data controller of your personal data and I am subject to the Data Protection Act 2018 and the UK General Data Protection Regulation.

If you wish to contact me in relation to this Privacy Policy, please email me at: transformation@cathy-hargreaves.com or speak to me directly.

This Privacy Policy supersedes any previous Privacy Policy or equivalent which you may have been provided with or seen prior to the Effective Date stated above.  

Your rights

Under the Data Protection Act 2018 and the UK General Data Protection Regulation you have the right:

• to obtain access to, and copies of, the personal data that I hold about you
• to require that I cease processing your personal data if the processing is causing you damage or distress
• to require me not to send you marketing communications
• to require me to erase your personal data
• to require me to restrict my data processing activities
• to receive from me the personal data I hold about you which you have provided to me, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller
• to require me to correct the personal data that I hold about you if it is incorrect

​​

Please note that the above rights are not absolute, and I may be entitled to refuse requests where exceptions apply.

​

The Information Commissioner is the supervisory authority in the UK and you can find out more about your rights at www.ico.org.uk.  

​

If you have any questions about how I use your personal data, or you wish to exercise any of the rights set out above, please contact me. If you are not satisfied with how I am processing your personal data, you can make a complaint to the Information Commissioner.

​

How I collect your data

​I collect your personal data in several ways, for example:

• from the information you provide to me when we meet, including notes of our session(s)
• when you communicate with me by telephone, email or other forms of electronic communication
• when you complete or update (or I do so on your behalf) a new client intake form, and any ancillary forms
• from a member of your family or a medical professional  

​

The categories of personal data I collect

• contact information such as your name, title, address, email address and telephone number
• biographical information including your marital status, date of birth, gender and GP details
• an understanding of your goals and objectives in procuring my services
• information about your employment, education, family or personal circumstances, and interests, where relevant

​

The basis for processing your personal data (other than with your consent)

​

1. Performance of a contract with you

I process your personal data because it is necessary for the performance of our contract or in order to take steps at your request prior to entering into a contract. In this respect, I use your personal data:

​

• to prepare a proposal for you regarding the services I offer

​​

• to provide you with my services

​​

• to deal with any complaints or feedback you may have

​​

In this regard, I may share your personal data with or transfer it to:

​

• your family members or a medical professional whom you tell me about. I will inform you of this you before so sharing it

​​

• my professional advisers where it is necessary for me to obtain their advice or assistance, including lawyers or accountants

​​

2. Legitimate interests

​​I also process your personal data because it is necessary for my legitimate interests. In this respect, I use your personal data for the administration and management of my business, including recovering money you owe to me. I may share your personal data with my advisers or agents where it is necessary for me to obtain their advice or assistance in this respect.

​

3. Legal obligations

​​I will also process your personal data for my compliance with a legal obligation which I am under. In this respect, I will use your personal data:

​

• to meet my compliance and regulatory obligations

​​

• as required by any competent court or legal authority

​​

In this regard, I will share your personal data with:

​

• my advisers where it is necessary for me to obtain their advice or assistance

​​

• with relevant regulators or law enforcement agencies where I am required to do so

​​

Where I need your explicit consent to process your data

​In providing my services it may be necessary for me to process data concerning your health. If you agree to this, please tick here 

and sign below.

​

I consent to the processing of my data for you to provide your services: [RTT and Hypnotherapy]

​

If you do not agree to this or you withdraw your consent, I may not be able to provide my services to you.

​

Withdrawal of consent

​If you have given your consent and you wish to withdraw it at any time, please contact me.

​

Sharing of personal data

​I do not share your personal data with any third party other than in accordance with this Privacy Policy.

​

Where I keep your personal data

​Your personal data is mainly stored in a lockable cabinet. Your phone number(s) may be kept in my mobile phone with your first name and last initial.

​

Retention of your data

I will only retain your personal data for as long as I have a lawful reason to do so. In most cases I will retain your personal data for seven years, being the period required by my insurer. I will, however, delete your phone number(s) from my mobile phone within three months.

​

Cookies

My site does not use cookies.