GDPR and Privacy
Privacy Notice
The Happy Human
Data Controller: Ali Hollands Hook
ICO Registration number: ZB64863
email: ali@happyhuman.online
Your Privacy Matters
At The Happy Human, I understand that choosing to contact a therapist often involves sharing personal and sometimes sensitive information. Protecting your privacy and handling your information with care is extremely important to me.
I only collect information that is reasonably necessary for the provision of therapy and the safe running of my practice.
I am committed to collecting the minimum amount of information necessary to provide a safe, effective and professional service.
This Privacy Notice explains what information I collect, why I collect it, how it is stored, and your rights regarding your personal information.
Personal information is processed in accordance with UK GDPR, the Data Protection Act 2018 and other applicable UK data protection legislation.
What information do I collect?
If you contact me:
When you contact me via my website, email, telephone, WhatsApp, text message or social media, I may collect:
* Your name
* Email address
* Telephone number
* Information you choose to share about the reason for your enquiry
If you become a client:
If you choose to work with me, I may collect:
* Contact details
* Consultation and assessment information
* Relevant health information that you choose to share
* GP details where appropriate and with your consent
* Appointment records
* Handwritten clinical notes
* Payment and invoicing information
You are not obliged to provide information. However, if essential information is withheld, I may be unable to provide a safe and effective service.
Website Information:
When you visit my website, certain information may be collected automatically through Wix, including:
* IP address
* Browser type
* Device information
* Website usage statistics
* Cookies and similar technologies
Why do I collect this information?
I use your information to:
* Respond to enquiries
* Arrange consultations and appointments
* Provide hypnotherapy and psychotherapy services
* Maintain appropriate clinical records
* Manage payments and administration
* Meet professional, legal and insurance obligations
* Improve website performance and user experience
If you choose to subscribe to a newsletter or marketing communications, your information will only be used for those purposes with your consent.
Lawful basis for processing
Under UK GDPR, personal information is processed on one or more of the following lawful basis:
​
Contract
Where processing is necessary to provide the services you have requested.
​
Legitimate Interests
Where processing is necessary for the safe and effective running of the practice, including maintaining records, responding to enquiries and managing appointments.
Legal Obligation
Where processing is necessary to comply with legal, professional, safeguarding or regulatory requirements.
Special Category Data
Health information is classed as special category data.
Where health information is processed, this is done for the provision of therapeutic services and in accordance with Article 9 of UK GDPR.
Confidentiality
Everything discussed during therapy sessions is treated as confidential.
As part of safe and ethical practice, I undertake regular clinical supervision. Information discussed in supervision is anonymised. Supervisors are also bound by professional and confidentiality obligations. My supervisor may use artificial intelligence to create anonymised supervision records
There are some circumstances where confidentiality may need to be breached. These include:
* Where there is a serious risk of harm to yourself or another person
* Where safeguarding concerns arise
* Where disclosure is required by law
* Where disclosure is required by a court order
Where appropriate and possible, I will discuss any disclosure with you beforehand.
Artificial Intelligence and Session Recording
Therapy sessions are not audio recorded or video recorded.
The Happy Human does not use artificial intelligence systems to record, transcribe, analyse or create notes from therapy sessions.
Clinical notes are created manually by the therapist and stored securely.
Communication Methods
You may choose to contact me via:
* Telephone
* Text message
* Social media messaging
* Website enquiry forms
Whilst reasonable steps are taken to protect your information, electronic communication cannot be guaranteed to be completely secure. Please avoid sharing highly sensitive personal information via social media messaging platforms.
How Your Information Is Stored
Paper records are stored securely in locked storage.
Electronic information is stored using password-protected devices and systems.
The practice currently uses trusted third-party providers including:
* Wix (website hosting and booking systems)
* Microsoft 365 (email and document management)
* Zoom (online sessions)
* Stripe (payment processing)
These providers maintain their own privacy and security measures and process information in accordance with their own privacy policies.
How Long Is Information Retained?
Therapy Records
Consultation forms and handwritten clinical notes are retained for seven years following the end of therapy.
Financial Records
Financial records are retained for six years in accordance with HMRC requirements.
Enquiries
Information relating to enquiries that do not become clients is normally retained for up to 12 months.
Newsletter Subscribers
Marketing and newsletter information is retained until you unsubscribe or withdraw your consent.
At the end of the relevant retention period, information is securely deleted or destroyed unless there is a legal, regulatory, insurance or safeguarding reason requiring it to be retained for longer.
​
Your Rights
Under UK GDPR, you have the right to:
* Request access to your personal information
* Request correction of inaccurate information
* Request restriction of processing in certain circumstances
* Object to processing in certain circumstances
* Request portability of information where applicable
* Lodge a complaint with the Information Commissioner's Office (ICO)
The right to erasure is not absolute and may be limited where records must be retained for legal, regulatory, insurance or safeguarding reasons.
​
Marketing Communications
You will only receive marketing emails or newsletters if you have specifically chosen to subscribe.
You can withdraw your consent or unsubscribe at any time by following the unsubscribe instructions included in communications or by contacting me directly.
Therapy clients will not be automatically added to marketing lists.
​
Complaints
If you have any concerns about how your information is handled, please contact me in the first instance and I will do my best to resolve the matter.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
​
Changes to This Privacy Notice
This Privacy Notice may be updated from time to time to reflect changes in legislation, professional guidance or business practices.
The most current version will always be available on this website.
​
​