Privacy Policy.

Updated March 2022

This Privacy Policy explains in detail the types of personal data Sam Richardson may collect about you when you interact with her. It also explains how she will store and manage that data and keep it safe.

She knows that there is a lot of information here, but she wants you to be fully informed about your rights and how she intends to use your data.

She hopes the following sections will answer any questions you have but if not please do contact her. It is likely that she will need to update this Privacy Policy from time to time. She will notify you of any significant changes where she can, but you are welcome to come back and check it whenever you wish.


Who is the Data Controller?

Sam Richardson is the Data Controller and responsible for your personal data.


How does she gather data?

The basis on which Sam Richardson keeps client data is that of “Legitimate Interests.” This means that the data is necessary for her to fulfil the contract that you have together (i.e., to provide therapies) and that it is data that you would expect her to hold and use.

For those who inquire about the services that Sam Richardson offers, the data she holds includes any information you have sent her via the automated contact form on her website, phone, and by email.


What data does she collect and how is it used?

Personal data is that which can identify you as an individual and data which Sam Richardson may collect about you for legitimate business interests. This includes contact data when you make an inquiry regarding the services she offers, either via her website, phone, email or by social media (Instagram/facebook).

She process’s personal sensitive data in the form of collecting a completed client questionnaire relating to your health history and other relevant information for the purpose of identifying areas of concern for healing or personal development strategies to enable an increase in wellbeing. This information is recorded and securely stored on a password protected computer and saved in password protected vault in the cloud.

Financial data:   Payment for services made via direct transfer and data is encrypted by Sam Richardson’s bank, and bank details stored electronically on the account page. 


For those who book and attend at least one session, the data Sam Richardson may hold may include:

  • Details about you such as your full name, date of birth, address, email, telephone number (home and/or mobile), GP contact details.

  • More detailed information will be kept about you regarding your past and present mental/emotional/spiritual and physical health and wellbeing, as well as your medical history, all of which are necessary to provide the most effective therapy.

  • Any contact Sam Richardson has with you, such as appointments (in person, by phone or by zoom or any other method of communication).

  • Notes and reports about your health and wellbeing created by Sam Richardson.

  • Details of current/past illness and any medications currently taking, prescribed by your GP or over the counter remedies.

  • Reasons for treatment may be disclosed by yourself via email or text message before the consultation has taken place.


Where is your information stored?

  • Your information is contained on a client questionnaire form (completed before your first appointment), containing health and personal information, and stored securely electronically. This form is updated during subsequent visits.

Contact details are stored for the purpose of contacting you about legitimate business with you, such as feedback after an appointment or making further appointments.

  • Any emails sent between you and Sam Richardson are held on her computer’s hard drive. Her computer is password protected.

  • Any text messages sent between you are held on her mobile phone. Any relevant information is then transferred to your electronic file. The text is then deleted. Her mobile phone is password protected.

  • If you use PayPal or online banking, then clearly these systems will hold your data. Sam Richardson will download from these systems for accounting purposes.


However:

  • Sam Richardson is not in control of data (including emails and texts) which you send me.

  • Social media platforms such as Facebook and Instagram routinely access information held on their site and this is beyond her control.


How long is your personal and sensitive personal data kept for?

As per legal requirements by her insurers, Sam Richardson is obliged to keep your data for 10 years from the date of your first session. Records will be kept while you continue to have sessions with her. After 10 years your information is deleted from her computer and any paper data is shredded.


Sharing your data:

Sam takes measures to protect client confidentiality always. This means that no identifiable information about a client is passed to any third parties (anyone or any agency) without the express permission of that client, except when it is essential to providing care or necessary to protect someone’s health, safety, or wellbeing.

If a client or another person is at grave risk of serious harm, then Sam can take advice from a professional/regulatory/defence body, to decide whether disclosure without consent is justified to protect the client or another person.

Sam may need to discuss details of your case with a supervisor to ensure you are receiving the best possible care, in which case only information about your mental/emotional/Spiritual and physical health will be disclosed – any personal information that may identify you or your family (names, address, date of birth, telephone number, email etc.) will not be disclosed.


Zoom, Face-time Sessions:

Sessions with Sam are confidential and are never recorded (unless requested to do so by the client). The only information that will be kept by the system is the time, date, duration, and contact information which is required to create the appointment.

Sometimes there may be need to send information over the chat box, via email or via text message with lists of tasks/homework and tailor-made hypnosis-meditations or guidelines, all of this is deleted after the sessions have ended.

Email information stays with the email server until such a time as emails are deleted. All emails and website form responses are on a secure server and any information that you send in an email about your session with Sam is confidential and only seen by Sam, and voluntary on your behalf. Sam cannot be held responsible for the integrity of email travel over the internet. CONFIDENTIAL INFORMATION IS NEVER SHARED WITH ANYONE

Privacy Policy: (Apple) Facetime:

https://support.apple.com/en-gb/HT209110

Privacy Policy: Zoom:

https://zoom.us/gdpr


Opt-out or removal of your information:

You always have the option of removing your personal data from any communications list to discontinue any such future communications.

To ensure immediate removal from any list, please follow the specific instructions set forth within the communications you receive from Sam, which you no longer wish to receive.

If you are unsuccessful in completing the instructions specified in any such communication, please connect with Sam via her contact form and simply request to be unsubscribed.

By entering information into the contact form, you must be aware that anything you send is sent to Sam via a secure email system. You will not be added to any email listing without an opt-in form.

Sam Richardson respects the privacy concerns of the users of her website www.samrichardsonwellbeing.com and the services and/or goods provided there. She ­­­provides this privacy statement to explain what information is gathered during a visit to the site and how such information may be used.


Your Rights:

Under the Data Protection Act: May 2018 you have the following rights in relation to the use of your personal data. These include:

1.      The right to be informed.

2.      The right of access.

3.      The right to rectification.

4.      The right to erasure.

5.      The right to restrict processing.

6.      The right to data portability.

7.      The right to object; and

8.      The right not to be subject to automated decision-making, including profiling.

You can exercise your rights at any time. There will not be a fee to process these requests. However, a reasonable administration fee may be charged if requests are repetitive or excessive. If you wish to exercise any of these rights, please connect with Sam via her contact form.


Complaints:

If you are not happy with any aspect of the way in which Sam processes your personal data, you have the right to complain to the Information Commissioner’s Office (www.ico.org.uk) the UK supervisory authority for data protection issues. However, Sam would appreciate the chance to resolve any concerns you may have before contacting the (ICO), so please contact her for further assistance.

If there is any breach of data security, she will give full details to the Information Commissioners Office and any person affected within 72 hours of the breach and will do everything possible to minimise any potential impact.

Sam’s Data Protection Registration Number: ZA460286. 


Access to personal information

You have the right to request access to view or to obtain copies of the information held by Sam and to have it amended should it be inaccurate. You should receive this information no later than 28 days after the request has been made.

However, there are several grounds on which she can refuse to erase client information, such as:

  • Our need to comply with a legal obligation for the performance of a public interest task, or exercise legal authority.

  • For public health purposes in the public interest.

  • The exercise or defence of legal claims.


Changes to your information

It is important to let Sam know if any of your details have changed, such as your name or address so that it can be amended. You have a responsibility to inform Sam of any changes so our records are up to date. Please contact her via her contact form to let her know of any such changes.


Use to third parties

Personal data and Sensitive data are never sold, leased, or shared with any third parties.


Financial Data

Sam Richardson’s site does not store any credit card information it may receive regarding a specific transaction and/or billing arrangement except as necessary to complete and satisfy its rights and obligations about such transaction, billing arrangement, and/or as otherwise authorised by a user.

Payment for services is made via direct transfer and data is encrypted by her bank. Bank details are stored electronically on the account page.


Profiling Personal Data

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a subscriber, to analyse or predict aspects concerning that subscriber’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.

SAM RICHARDSON DOES NOT ENGAGE IN ANY SORT OF PROFILING OF ITS SUBSCRIBERS BASED ON PERSONAL DATA.


Children under the age of sixteen

Sam Richardson recognises the special obligation to protect personal data obtained from children aged sixteen and under. IF YOU ARE 16 YEARS OLD OR YOUNGER, I REQUEST THAT YOU DO NOT SUBMIT ANY PERSONAL INFORMATION TO THE SITE OR TO myself.

If Sam discovers that a child aged sixteen or younger has signed up on the SITE and/or provided herself with personal data, she will delete that child’s personal data from her records straight away. Adult supervision is required always. If the client is a child, records must be kept for at least 10 years after they reach adulthood.


Use of cookies

Cookies are pieces of information that a website transfers to an individual’s computer hard drive for record keeping purposes. Cookies make using Sam Richardson’s site easier by saving your passwords and preferences for you.

These cookies are restricted for use only on the company’s site, and do not transfer any personal data to any other party. Most browsers are initially set up to accept cookies. You can, however, reset your browser to refuse all cookies or indicate when a cookie is being sent. Please consult the technical information relevant to your browser for instructions. If you choose to disable your cookies setting or refuse to accept a cookie, some parts of the site may not function properly or may be slower.


Malware, Spyware, Viruses

Neither the site nor Sam Richardson knowingly permit the use of malware, spyware, viruses, and/or other similar types of software.


Links to external sites

Sam Richardson is not responsible for the content or practices of third-party websites that may be linked to the site. She also is not responsible for any information that you might share with such linked websites. You should refer to each website’s respective privacy policy and practices prior to disclosing any information.

Links and references to other websites, organisations or people beyond our website are provided for convenience and information purposes only and should not be taken as an endorsement of such website, organisation, or person by Sam Richardson.


Security

Security for all personal data is extremely important to Sam Richardson. Unfortunately, no data transmission over the internet can be guaranteed to be 100% secure. As a result, while she strives to protect subscriber’s personal data, she cannot ensure or warrant the security of any personal data the subscriber transmits via the internet. By transmitting any such information to her site, the subscriber accepts that he or she does so at their own risk.


Email Conversations

Email conversations are deemed confidential and never shared with anyone. All information you supply to Sam is over secure email. All information you share with Sam is voluntary and all correspondence will be deleted from her system after 2 years.


Contact Information

If you have any complaints or concerns about Sam Richardson or about this privacy statement, please contact her via her contact form.


Your acceptance of these terms

By using the site, the subscriber accepts the policies and restrictions set forth in this Online Privacy Policy. If you do not agree to this policy, please do not use the site. This Online Privacy Policy may be revised from time to time. You are bound by any such revisions and should therefore periodically visit this page to review the then current Online Privacy Policy to which you are bound.

 

Sam Richardson