Introduction: iHypnosis™ College is committed to protecting the privacy and confidentiality of personal information. This Data Protection Policy outlines the principles and practices governing the collection, use, disclosure, and security of personal data in accordance with relevant data protection laws.
Scope: This policy applies to all personal data processed by iHypnosis™ College in the course of its operations, including information collected from students, staff, contractors, and other stakeholders.
Principles:
- Lawfulness, Fairness, and Transparency:
- Personal data will be processed lawfully, fairly, and transparently.
- Purpose Limitation:
- Personal data will be collected for specified, explicit, and legitimate purposes and will not be further processed in a manner incompatible with those purposes.
- Data Minimization:
- iHypnosis™ College will only collect and process personal data that is adequate, relevant, and limited to what is necessary for the intended purposes.
- Accuracy:
- iHypnosis™ College will take reasonable steps to ensure that personal data is accurate, complete, and up-to-date.
- Storage Limitation:
- Personal data will be kept in a form that permits identification for no longer than is necessary for the purposes for which it is processed.
- Security:
- iHypnosis™ College will implement appropriate technical and organizational measures to ensure the security of personal data.
Data Collection:
- Consent:
- iHypnosis™ College will obtain explicit consent from individuals before collecting and processing their personal data, where required.
- Purpose Specification:
- The purposes for which personal data is collected will be clearly communicated to individuals at the time of collection.
Data Use and Disclosure:
- Internal Use:
- Personal data will only be accessed and processed by authorized personnel for legitimate purposes related to the provision of training services.
- Third-Party Processing:
- iHypnosis™ College will ensure that third-party service providers processing personal data on its behalf adhere to the same data protection standards.
Data Subject Rights:
- iHypnosis™ College will respect and facilitate the exercise of individuals’ rights, including the right to access, rectify, erase, or restrict the processing of their personal data.
Data Breach Response:
- In the event of a data breach, iHypnosis™ College will promptly assess and mitigate the impact, notify the appropriate authorities.
Training and Awareness:
- iHypnosis™ College will provide training to employees and contractors on data protection principles and their responsibilities under this policy.
Review and Update:
- This policy will be reviewed periodically to ensure its continued effectiveness and compliance with applicable data protection laws.
Contact Information:
- For inquiries related to data protection, please contact the Data Protection Officer at info@ihypnosis.org.uk.
Date of Last Revision: November, 2023