Privacy policy.

I am registered with the ICO (Information Commissioners Office) and adhere to the General Data Protection Regulation (GDPR) which means I need to tell you what data I am collecting from you and what I intend to do with it.

COLLECTION AND USAGE OF YOUR PERSONAL DATA

I collect personal and sensitive information about you (including name, address, email address, telephone numbers, GP/emergency details, date of birth, gender, ethnicity, religion, sexual orientation, medical and mental health information). 

I use the information to provide an effective therapy service, to contact you regarding sessions and to send you receipts and/or invoices.

I keep short factual notes of our sessions and a record of attendance.

SHARING OF YOUR DATA

I might share data if required by law, or if ordered to by a court or if you tell me about risk of serious harm to yourself or someone else. 

I have clinical supervision where I talk about my work, but I only use your first name. 

All payments will be recorded in my accounts using your name and might be shared with HMRC if I am audited. 

If an Employee Assistance Programme (EAP) or insurer has referred you, factual notes and attendance details might be provided to the EAP or insurer (depending on their policy).

STORAGE AND DISPOSAL OF DATA

Most of my records are stored electronically and encrypted and/or password protected. My financial accounts, email and mobile phone are all electronic and encrypted and/or password protected. Any paper records are stored securely in a locked cabinet.

My insurer requires me to keep counselling session notes and your personal information for a period of five years. After this time data will be destroyed.

I will delete any data related to you from my mobile phone and email no later than one month after ending therapy. 

ACCESS TO OR CHANGE OF YOUR DATA

You can make a subject access request in respect of your personal information held by me by making a request in writing. Once I receive the written request, I will respond within 14 days. If you were referred by an EAP or insurance company, you should address the request directly to them.

If during therapy information is provided by more than one individual (couples therapy) I will only release information if consent has been given by both individuals involved.

You may also request that inaccurate personal data is amended.

CONCERNS 

If you have any concerns about how I have handled your data, you can complain to the Information Commissioner’s Office (ICO): ico.org.uk/concerns