The General Data Protection Regulation (GDPR) is concerned with the personal information about you that I collect, store, and share. This statement details my GDPR policy.
I collect the following information in order to help me provide psychological therapy to you, receive clinical supervision and consultation, and to maintain my accounts for billing and invoicing.
Name, gender, date of birth, address, telephone numbers, email address, GP details, occupation, education, details of family and close relationships, details of past experiences, counselling /therapy history, medical conditions, medication, substance use, emotional & psychological issues.
I have regular supervision/consultation with other therapists, (psychologists, psychotherapists, counsellors) for my own professional development and the wellbeing of clients. I will discuss some personal details in these consultations. You are never identified by your full name in these sessions. My supervisors are bound by the same confidentiality rules, code of ethics and rules of GDPR.
If you were referred to me via an organisation, then there may be particular parts of your personal information that will be shared with that organisation. I will make it clear to you at the start of therapy what information may be shared
In the case of my serious illness or death, your name and contact details will be shared with my Therapeutic Executors. This is so you can be contacted if you are still in therapy with me. They will also be responsible for safely disposing of the personal information I hold on you. As professional Psychotherapists and Psychologists, they are bound by the same confidentiality rules, code of ethics and rules of GDPR
If I have reason to believe that you intend to harm another person/organisation (eg. terrorism), or yourself, the law may require that I inform an authority without seeking your permission. In such a situation, the law may require that I share your personal information without your knowledge. I would always endeavour to discuss this with you in advance if possible or appropriate. It is also the law that a judge can require the release of clinical notes without your permission, and I would be bound by law to release them. Again I would discuss this with you beforehand should this occur.
Paper : contact details for you, next of kin and GP, personal information, work done in sessions, psychometric tests when completed, assessment/history taking notes, occasional email correspondence, brief therapy process notes and invoices. All paper files/notes are stored in a locked filing cabinet in my office when not in use .
Digital : I keep your name, phone number and email address in my smart phone (whilst you are in therapy with me). I access my email account through my computer and smart phone . All these devices are password protected.
Website : No personal information is stored on my website.
I keep electronic emails and SMS/texts for up to a year after therapy. My professional indemnity insurance company requires me, to retain your written notes for up to 7 years after we have completed our work together. After this time has passed, I will shred the written information.
To be informed of what information I hold (this document).
To see the information that I hold about you (free of charge for the initial request).
To rectify/correct any inaccurate or incomplete personal information.
To withdraw consent to me using your personal information.
To request your personal information is erased/deleted/shredded. I can decline if the information is needed for me to practice competently and in line with my insurance, or if there is an adverse reason (such as a complaint or legal reason).