This notice explains how and why your data is collected, stored and processed in compliance with the General Data Protection Regulation – (GDPR)
I collect, store and process information about you to enable me to run my psychotherapy and counselling practice in an ethical and professional manner. I collect this information as per the GDPR regulations, Legitimate Interests for the purposes of healthcare.
The information I collect includes: name, address, email, contact number, videoconference ID (if online therapy). I may also collect health information such as GP contact details and any therapy related reports.
I keep brief hand-written notes after each session so that I can provide you with the best possible attention I can. These notes are not identifiable by name.
I also keep a hand written diary, in which I record appointments using first names only.
I will do my best to keep your information safe:
All information that I collect and store about you is stored behind lock and key and/or password protected. My email data is stored securely using GDPR – compliant services. I may keep this information for up to 7 years of our last session, as per my insurer’s terms and conditions, at which point, they will be securely deleted.
I may use your information to track the progress of our work together or your work with clients, (if a supervisee), and as a basis for my own reflection, and for discussion purposes in my own supervision.
If you have come to me via a health insurance provider, I may provide treatment updates when required to do so. Or liaise with other health providers, with your permission.
In exception circumstances, if I believe you or another person is at significant risk, I may contact the suitable authority without your permission. This might include your GP, the emergency services, and the mental health crisis team.
I am required by law to pass on information relating to acts of terrorism and ongoing abuse of a minor or vulnerable adult.
Your contact details may also be passed on to my Therapeutic Executor so that you are informed should anything happen to me that would prevent me from attending a session and from communicating with you directly – such as illness or death.
It is assumed that by engaging with the service I offer you are consenting to records being kept and processed in this way.
I am registered as a Data controller with the Information Commissioners’ Office. (ICO). Further information about the ICO, GDPR and your rights as a client with regards to information held about you can be found on the ICO website.
Thank-you for reading.