Data Protection and Privacy Policy
Maintaining safe protection and privacy of personal information is a vital part of my practice as a Psychotherapist Counsellor and Clinical Supervisor. This document describes my data protection and privacy policy, in line with good practice and relevant legislation, including the General Data Protection Regulations (GDPR) 2018.
I collect and keep some personal information from my clients and supervisees. The purpose of this is to record who I am seeing and ensure that I am practicing effectively and able to communicate with clients and supervisees as necessary for our work. I keep: our contract, brief notes of our sessions, your contact details (name, address, telephone number (s), email addresses, relevant emails and texts as recommended by professional bodies and insurers.
I take the following measures to ensure your information is stored securely:
- Paper documents are kept in a locked filing cabinet.
- The therapy contract signed at the beginning of our work is stored separately to session notes.
- Session notes do not contain any information that would identify you or others you discuss in person
- Email addresses and mobile numbers are kept on password protected devices only.
- When information is no longer required it is deleted or shredded.
- Paper records are kept for 7 years after the therapy has ended in accordance with professional and insurance guidelines.
There are limits to the protection of private information where disclosure is legally mandated and/or concerns child protection and significant risk of harm.
You are entitled to have access to the personal data that I hold about you via a subject access request . I will respond to your request within one calendar month .
In the unlikely event of a personal data breach I will inform you as soon as possible, record it and report it within 72 hours to the relevant supervisory authority.
See the Information Commissioner’s website https://ico.org.uk for further information about data protection legislation.