Privacy Policy

What personal data I collect and why I collect it?

In accordance with the current data protection laws, this privacy policy states how I use your personal data when you interact with me. As a member of UKCP and HCPC I abide by and conform to their standards and ethical requirements which include the strictest laws of confidentiality.

Data protection law (GDPR) states that individuals have the right to be informed as to how their personal data is held and used. This privacy policy explains the personal information I collect from you as my client, as well as how I store, process and delete it.

As a private practitioner I act as both data Controller (which means that I plan procedures regarding how data is held according to the GDPR regulations), and data Processor (which means that I collect and store data required within my therapy practice).

As a client, when you agree to start working with me I provide a written working agreement which confirms the cost and length of sessions, my cancellation policy and the ethical framework I work within. You will need to sign this agreement before we commence therapy.

I will also collect personal details from you, which include your full name; date of birth; address; contact number; email address and details for an emergency contact if something were to happen to you on my premises. I also record any relevant mental or physical health issues that may be relevent to the therapy along with details of any medication you are currently taking.

Storage of personal details

I keep brief clinical notes about our sessions, which may include sensitive information that you have chosen to share. Where appropriate, I may also keep a record of creative work (including photographs or images created during therapy) as part of the clinical record.

To support accurate record keeping and my ongoing reflective practice, I may use carefully selected digital tools to help organise clinical information and assist my professional reflection. These tools are used only to support my clinical thinking and never replace my professional judgement.

Wherever reasonably possible, I minimise unnecessary identifying information shared with these systems. Any clinical records remain my responsibility regardless of the tools used to assist my reflective practice.

Clinical records, contracts and personal information are stored securely using password-protected and encrypted electronic systems together with appropriate security measures. Paper-based materials and artwork are anonymised where appropriate and stored securely.

I keep personal data for up to five years, as it may be relevant should a client return to therapy. Images are retained for up to twelve months before being securely destroyed.

Digital Tools & Reflective Practice

Supervision

I have regular supervision and my supervisor is the only person I discuss the work with. My Supervisor is bound by the same terms of confidentiality as I am. Wherever reasonably possible, I minimise identifying information when discussing my work in professional supervision or when using carefully selected digital tools to support my reflective practice.

In the event of my becoming incapacitated in some way, a trusted colleague is able to access only the contact details of my clients. The other occasions when data might be shared is when I have your consent to do so, or when I am obliged to break confidentiality for reasons which are discussed in the therapy agreement that I ask you to sign at the beginning of your therapy.

The only exception to confidentiality is when I believe that you or someone else is at risk of serious harm. I would endeavour to discuss this breach with you first so that we could come to an agreement about who needed to be informed. However, if an agreement is not reached and I still believe that you, or someone else is at risk, I will discuss the situation with my supervisor and decide how to proceed. Where a threat of terrorism or drug trafficking is disclosed, I am obliged by law to inform the authorities.

Your rights

In accordance with GDPR, you have the following rights:

To be informed of the information that I store about you and to ask to see the information that I hold about you. I am legally required to respond to any request from a client in writing to see their personal data within 30 days.
To ask that I rectify any information that you deem inaccurate, unnecessary, or incomplete (if I need to keep a record to comply with legal requirements then I may decline this request).

I am a registered member of ICO (Information Commissioner’s Office).