Data Protection Policy

1. Introduction

Hypnatal Birthing (the "Company") is committed to protecting the privacy and security of personal data that it processes. This Data Protection Policy outlines how Hypnatal Birthing collects, uses, stores, and protects personal data in compliance with relevant data protection laws, including the General Data Protection Regulation (GDPR) and other applicable regulations.

2. Scope

This policy applies to any individuals or entities engaged by Hypnatal Birthing who have access to personal data. It also covers all personal data processed by the Company, whether in electronic or physical form.

3. Definitions

Personal Data: Any information relating to an identified or identifiable natural person (data subject), including but not limited to names, contact information, health information, and financial details.
Processing: Any operation performed on personal data, such as collection, storage, use, disclosure, and deletion.
Data Subject: An individual whose personal data is processed by the Company.
Data Controller: Hypnatal Birthing, which determines the purposes and means of processing personal data.
Data Processor: Any third party that processes personal data on behalf of the Data Controller.

4. Data Collection

Hypnatal Birthing collects personal data for the following purposes:

To provide hypnobirthing services, including consultations, antenatal sessions, and related services.
To manage client relationships and communicate with clients.
To comply with legal obligations and industry standards.
For administrative purposes, including billing, record-keeping, and reporting.

Personal data collected may include:

Client Information: Names, contact details, and preferences.
Financial Information: Payment details, billing addresses, and transaction history.
Communication Data: Emails, messages, and any other communications with the Company.

5. Lawful Basis for Processing

Hypnatal Birthing will only process personal data when there is a lawful basis to do so. These bases include:

Consent: The data subject has given explicit consent for specific processing activities.
Contractual Necessity: Processing is necessary for the performance of a contract with the data subject.
Legal Obligation: Processing is required to comply with legal obligations.
Legitimate Interests: Processing is necessary for the legitimate interests of the Company, provided these interests are not overridden by the rights and freedoms of the data subjects.

6. Data Subject Rights

Data subjects have the following rights concerning their personal data:

Right to Access: Request access to their personal data held by the Company.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request the deletion of personal data under certain conditions (also known as the "right to be forgotten").
Right to Restriction: Request the restriction of processing of their personal data under certain conditions.
Right to Data Portability: Request the transfer of their personal data to another data controller.
Right to Object: Object to the processing of their personal data in certain situations, including direct marketing.

Data subjects can exercise these rights by contacting Hypnatal Birthing at hello@hypnatalbirthing.co.uk.

7. Data Security

Hypnatal Birthing implements appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

Secure storage systems and access controls.
Regular data protection training.
Regular audits and assessments of data protection practices.

8. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once the retention period has expired, personal data will be securely deleted or anonymised.

9. Data Sharing

Hypnatal Birthing may share personal data with third parties, such as service providers, who assist in providing services to clients. All third-party processors must comply with data protection regulations and enter into a Data Processing Agreement with the Company.

The Company will not sell or share personal data with third parties for marketing purposes without the explicit consent of the data subject.

10. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), Hypnatal Birthing will ensure that appropriate safeguards are in place, such as standard contractual clauses or other legal mechanisms, to protect the data.

11. Breach Notification

In the event of a data breach, Hypnatal Birthing will promptly assess the risk to data subjects and notify the relevant supervisory authority within 72 hours if the breach is likely to result in a risk to the rights and freedoms of individuals. Affected data subjects will also be notified if required by law.

12. Policy Updates

This Data Protection Policy may be updated from time to time to reflect changes in legal requirements or Company practices. The latest version will be available on the Company's website or upon request.

13. Contact Information

For any questions or concerns regarding this Data Protection Policy or the processing of personal data, please contact:

Data Protection Officer
Hypnatal Birthing
76 Bramley Drive, Hartley Wintney, Hampshire RG27 8ZF
07595 379440

hello@hypnatalbirthing.co.uk

Acknowledgment

By engaging with Hypnatal Birthing's services, clients acknowledge that they have read and understood this Data Protection Policy and consent to the processing of their personal data as described herein.

Data Protection Policy

1. Introduction

2. Scope

This policy applies to any individuals or entities engaged by Hypnatal Birthing who have access to personal data. It also covers all personal data processed by the Company, whether in electronic or physical form.

​

3. Definitions

Personal Data: Any information relating to an identified or identifiable natural person (data subject), including but not limited to names, contact information, health information, and financial details.

Processing: Any operation performed on personal data, such as collection, storage, use, disclosure, and deletion.

Data Subject: An individual whose personal data is processed by the Company.

Data Controller: Hypnatal Birthing, which determines the purposes and means of processing personal data.

Data Processor: Any third party that processes personal data on behalf of the Data Controller.

​

4. Data Collection

Hypnatal Birthing collects personal data for the following purposes:

To provide hypnobirthing services, including consultations, antenatal sessions, and related services.

To manage client relationships and communicate with clients.

To comply with legal obligations and industry standards.

For administrative purposes, including billing, record-keeping, and reporting.

Personal data collected may include:

Client Information: Names, contact details, and preferences.

Financial Information: Payment details, billing addresses, and transaction history.

Communication Data: Emails, messages, and any other communications with the Company.

​

5. Lawful Basis for Processing

Hypnatal Birthing will only process personal data when there is a lawful basis to do so. These bases include:

Consent: The data subject has given explicit consent for specific processing activities.

Contractual Necessity: Processing is necessary for the performance of a contract with the data subject.

Legal Obligation: Processing is required to comply with legal obligations.

Legitimate Interests: Processing is necessary for the legitimate interests of the Company, provided these interests are not overridden by the rights and freedoms of the data subjects.

6. Data Subject Rights

Data subjects have the following rights concerning their personal data:

Right to Access: Request access to their personal data held by the Company.

Right to Rectification: Request correction of inaccurate or incomplete personal data.

Right to Erasure: Request the deletion of personal data under certain conditions (also known as the "right to be forgotten").

Right to Restriction: Request the restriction of processing of their personal data under certain conditions.

Right to Data Portability: Request the transfer of their personal data to another data controller.

Right to Object: Object to the processing of their personal data in certain situations, including direct marketing.

Data subjects can exercise these rights by contacting Hypnatal Birthing at hello@hypnatalbirthing.co.uk.

7. Data Security

Hypnatal Birthing implements appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

Secure storage systems and access controls.

Regular data protection training.

Regular audits and assessments of data protection practices.

8. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once the retention period has expired, personal data will be securely deleted or anonymised.

​

9. Data Sharing

Hypnatal Birthing may share personal data with third parties, such as service providers, who assist in providing services to clients. All third-party processors must comply with data protection regulations and enter into a Data Processing Agreement with the Company.

​

The Company will not sell or share personal data with third parties for marketing purposes without the explicit consent of the data subject.

​

10. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), Hypnatal Birthing will ensure that appropriate safeguards are in place, such as standard contractual clauses or other legal mechanisms, to protect the data.

​

11. Breach Notification

​

12. Policy Updates

This Data Protection Policy may be updated from time to time to reflect changes in legal requirements or Company practices. The latest version will be available on the Company's website or upon request.

​

13. Contact Information

For any questions or concerns regarding this Data Protection Policy or the processing of personal data, please contact:

Data Protection Officer Hypnatal Birthing 76 Bramley Drive, Hartley Wintney, Hampshire RG27 8ZF 07595 379440

hello@hypnatalbirthing.co.uk

Acknowledgment

By engaging with Hypnatal Birthing's services, clients acknowledge that they have read and understood this Data Protection Policy and consent to the processing of their personal data as described herein.

Data Protection Officer
Hypnatal Birthing
76 Bramley Drive, Hartley Wintney, Hampshire RG27 8ZF
07595 379440