Privacy Policy
This Privacy Policy is intended to clarify under the General Data Protection Regulation (GDPR) the protection of data provided by you, the client to me as a Psychotherapist.
Data Held
At our first meeting, new clients will be asked for relevant personal data for the purposes of conducting psychotherapy. This data will not be shared with any other party without the client’s consent, unless there is a legal requirement or court order to do so, or where there is immediate risk of substantial harm to themselves or to others. This data will be held in a password protected filing system. Personal data also includes session notes which will be maintained separately. This data will also be contained in a password-protected filing system.
Purposes of Processing and Legal Basis
As a Psychotherapist I will use personal data relating to you for the purposes of:
-
providing you with counselling services.
-
where necessary contacting your GP or organising specialised support services for you (subject to your explicit consent, save where there is a serious concern for your safety or the safety of others); and
-
to comply with my legal and regulatory obligations
The legal basis on which I collect, processes and transfer your information in the manner described above are:
-
a legitimate interest in providing you with counselling services. I will not process your personal data for these purposes if to do so would constitute an unwarranted interference with your own interests, rights, and freedoms; and
-
that this is necessary for compliance with a legal or regulatory obligation that applies to Counsellors and Psychotherapists; and
-
in limited circumstances, where you have given your consent to such processing.
The legal basis on which I collect, process, and transfer special categories of data relating to you in the manner described above are:
-
issues of public safety e.g., child protection issues or any other areas in which Counsellors are legally bound to disclose information, that this is necessary for the provision of health or medical care; and that you have given your explicit consent to such processing.
Data Retention
All personal data will be held by me for a period of 10 years from the date of cessation, in line with my insurance policy as a psychotherapist with OBF Insurance. This data will then be fully erased. Data will be held for longer, if necessary, e.g. in the case of an ongoing or pending court case of complaint. After the retention period, your records will be securely destroyed (e.g., shredding or permanent digital deletion).