In accordance with new guidelines on data usage and storage - The General Data Protection Regulation (GDPR) introduced in May 2018, I am required to explain how and why I hold or process information about you, as well as gain your consent to do this.
I am registered as a Data Controller with the information Commissioner's Office (ICO). I collect, store and process information about you to enable me to run my Psychotherapy, Supervision and Mindfulness training practice and to provide a safe, ethical service to you. This information can include your name, address and contact details, payment information as well as personal information about you and your domestic arrangements ('special category data').
How is your information kept safe?
All information that I collect and store about you is either anonymised, stored behind lock and key and/or password protected. I may keep this information for up to 7 years following the date of your last session with me, as per my insurer's Terms and Conditions, at which point it will be securely deleted.
What's your information used for?
I may use this information to track the progress of our work together or as the basis for discussion in my own supervision (necessary for me to remain an accredited therapist), for reflection and guidance, in a way that respects your anonymity. Your name and contact details may also be passed on to my appointed Therapeutic Executor so that you are informed should I be seriously incapacitated, and need to give up my practice either temporarily or permanently, and be unable to contact you directly myself.
When your information may be shared?
Please note that there are some unique circumstances in which I may be legally and/or ethically required to share certain information about you or our sessions with a health professional or legal representative. However, in such rare circumstances I would do my best to discuss this with you first.
You have the right to view your information following request, and to ask for any changes to be made.
You have the right to withdraw your consent for me to hold and process information about you at any time. However, we would also need to discuss the implications of this, as it would likely mean we couldn't continue our work together.
The Client Contact Information Sheet provided at our initial assessment session asks you to sign to say that you have read and understood the information provided on my website, including this privacy notice, and to give consent for information to be collected, stored and used in the ways above.
If you have any concerns or questions, please discuss these with me first. Alternatively, you may contact the ICO here: http://ico.org.uk/concerns/.