I am a sole practitioner and owner of the Practice and as such I am the Data Controller. The processing and protection of your data will be in accordance with The Data Protection Act 1988 (DPA) and General Data Protection Regulation 2018 (GDPR). I am registered with the Information Commissioners Register (No ZA778415). My registered office is: 306 Falcon Works, 8 Copperfield Road, London, E3 4RT.
MY LAWFUL BASIS FOR HOLDING AND USING YOUR PERSONAL INFORMATION
If you are currently having therapy, or if you are in contact with me to consider therapy, I will process your personal data for the provision of therapy and necessary for our therapeutic contract. In accordance with GDPR guidelines I look after any sensitive personal information that you may disclose to me appropriately.
HOW I USE YOUR INFORMATION
When you contact me with an enquiry about therapy, I will collect information to help me satisfy your enquiry. This will include name, contact details and a brief outline of your enquiry. If you decide not to proceed, I will ensure all your personal data is deleted within 48 hours.
If we begin therapy, I will collect further information from you. This includes sensitive personal data: current medication, health issues, ethnic origins, family background. This information enables me to offer therapy of a kind and quality that will meet your needs.
I will keep a record of your contact details to help the therapy service run smoothly. This record is stored on a password protected file and stored on a device that is multi-authentication protected. I will keep brief notes to support me in the on-going work. All notes are stored on digital files and are password protected. Your identifiable personal information is kept separately from any notes. The notes will be kept securely for 7 years to comply with legal requirements and then destroyed. If you want me to delete your information sooner than this, please request this in writing.
Everything you discuss with me is confidential. That confidentiality will only be broken if: there is an immediate to risk to life, a court order, the protection of a child or vulnerable person. I will always try to speak to you about this first, unless there are safeguarding issues that prevent this.
VISITORS TO MY WEBSITE
When someone visits my website, I use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. This information is processed in a way that does not identify anyone. I do not make, and do not allow Google to make, any attempt to find out the identities of those visiting my website.
You have the right to ask me to request copies of your personal data. You also have the right to require me to correct any inaccuracies in your information. If you would like to do this, please make this request to me in writing at my practice address listed at the top of this policy or email me at firstname.lastname@example.org
You can read more about your data protection rights at https://ico.org.uk/your-data-matters/
If you have a complaint about the handling of your personal information, please write to me at my practice address outlining your complaint. If you feel I have not resolved your concern in a satisfactory manner, you have a right to take your complaint further at the Information Commissioner’s Office https://ico.org.uk/make-a-complaint/