This privacy notice informs you how I collect and use any personal data you provide when you engage with my service. It details your rights and responsibilities according to the General Data Protection Regulations in the processing of your personal data. This policy is reviewed annually and will be updated/amended if necessary. If you have any questions about data protection, please contact email@example.com.
I collect and process the following personal data which is necessary for psychotherapy and to ensure I am providing a safe practice:
I obtain your contact details when you make an initial enquiry by completing the contact form on my website or contact me by phone/email. Further contact details are provided by email once you have agreed to commence psychotherapy. Other personal data is provided by you verbally during psychotherapy sessions.
I collect personal data to enable me to tailor the psychotherapy to your needs and to provide psychotherapy treatment and recommendations to you. It is standard practice for psychotherapists to take content notes after sessions, which help aid the process.
‘Contract’ is the lawful basis by which I collect and process your information, because your data is necessary for me to provide the service you are contracting me for. After you agree to commence psychotherapy with me, you will be sent a contract that outlines the terms and conditions under which psychotherapy is provided. If I need to share your personal data to protect someone’s life, (see point 5), the lawful basis for this is called ‘vital interests’. The lawful basis by which I process special category data is listed as a ‘substantial public interest condition’ and can be found under ‘counselling’ in Schedule 1 of the DPA.
All data collected by me is treated as confidential information. I may discuss some of your information with my clinical supervisor, which is a necessary process for all psychotherapists, and ensures that my practice is safe and ethical. My clinical supervisor is also a psychotherapist bound by the same GDPR regulations and confidentiality agreement that I adhere to. If your sessions are sponsored by an insurer or third party, they may require confirmation of your attendance and/or progress reports. All reports are kept brief and general in nature, noting themes that we have discussed, but never detailed content. There are rare and exceptional circumstances, in which I may need to breach confidentiality, in line with my duty of care as an accredited professional. These circumstances are:
I will always endeavour to discuss this with you prior to sharing any information.
All personal data is stored for 3 years from the date the therapy ended. All data is destroyed after this time period.
You have the right to inspect some or all the data I have collected if you wish, and this request will be fulfilled during a therapy session. If your sessions are sponsored by an insurer or third party, you will receive copies of any information I share with them, and this will be sent to you by email.
If you have queries or concerns about the collection and processing of your data, please discuss them with me. If you feel unable to do so, or we cannot reach a satisfactory resolution, you have a right to complain to the Information Commissioners Office at www.ico.org.uk.