Counsellor and trainee Transactional Analyst/Psychotherapist
Purpose of Privacy Notice
In May 2018 the General Data Protection Regulation (GDPR) replaced the Data Protection Act.
In accordance with the GDPR, this notice is to let you know how I use and protect the data you have given me.
In order for us to embark upon counselling, psychotherapy or any other form of psychological consultation, you will need to confirm your agreement to the processing of your data under the terms of this policy (see contract).
What information do I collect?
I collect personal information (data) such as name, address, date of birth, gender, GP/medical practitioner details, telephone number and e-mail address.
I may also record information you give me during our sessions regarding your personal story and your family background, alongside information relating to medical and mental health conditions.
I may record our sessions in order to be able to reflect on our work together in between sessions. I may also keep brief handwritten notes made during sessions.
What do I use your information for? To assist me in providing counselling, psychotherapy and other forms of psychological support;
To assist me in managing appointments and fulfilling administrative, legal, ethical and contractual obligations;
To contact you in order to share with you information that may be pertinent to our work together (e.g. articles, books, website links);
As part of my ongoing training and development I may use information from, and/or recordings of, our work together, in case studies, as assessed practice or in supervision. In this context your identity will be securely protected by being anonymised.
What information do I share?
I will not share any information about you with other organisations or people except in the following situations: Supervision: I am required by my professional body to undertake regular formal supervision where I discuss my work with an experienced supervisor. This is to ensure safety and ethical practice.
Serious Harm: I may share your information with the relevant authorities if I have reason to believe this may prevent serious harm being caused to you or another person.
Compliance with the Law: I may share information when the law requires me to - i.e. safeguarding, terrorism, drug trafficking and serious crime.
Clinical Will: I have a ‘Clinical Will’ which means in the event of my sudden death or a serious accident or illness that renders me incapacitated, a named colleague will be able to access the contact details of my clients and notify them.
Sharing your personal data
Your personal data will be treated as strictly confidential and will only be shared with: Named third parties with your explicit consent, eg. another healthcare provider who may be or who has been involved in your care;
My clinical supervisor: see 3.d. and 4.a. above;
A relevant authority such as the police or a court, if necessary for compliance with a legal obligation to which I am subject e.g. a court order;
Your doctor or the police, if necessary to protect yours or another person’s life;
The police or a local authority, for the purpose of safeguarding children or vulnerable adults;
My regulatory body or my insurance company, in the event of a complaint or insurance claim being brought against me;
My solicitor, in the event of any investigation or legal proceedings being brought against me.
How long do I keep your personal data?
I am required to keep your data for a minimum of seven years after your last contact with me.
Your rights and your personal data
You have the right to: Access the personal data which I hold about you.
Request that I correct any data if it is found to be inaccurate or out of date.
Where there is a dispute about the accuracy or processing of your data, to request a restriction is placed on further processing of your data.
Request that your personal data is erased where it is no longer necessary for me to retain such data.
Withdraw your consent to the processing of data at any time. This right does not apply where we are processing information using a lawful purpose other than consent.
Be informed if your data is lost. I shall also inform the Information Commissioner’s Office in accordance with the time limits in the GDPR.
If you withdraw your consent for me to hold or process your data at any time whilst actively receiving Counselling, Psychotherapy or other psychological support services from me, we would have to end our work together. You can withdraw your consent by stating this via the Contact Form on this website.
If you have any concerns about the way I handle your data, please discuss this with me in person or by email. If you feel this has not been resolved effectively you have the right to contact the Information Commissioner’s Office (www.ico.org.uk).
Contacting the Information Commissioner’s Office (ICO)
You can contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
N.B. This is a working document and will be updated from time to time in accordance with future current practice.