General data Protection Regulations which came into force on 25th May 2018 require me to set out what information I hold about you, how I keep it, for what purpose and for how long.
What type of information and how it is stored.
I may keep your ‘personal data’ as defined by the GDPR (e.g. your name, address, email address, phone number and your GP’s name and address, next of kin) in hard copy. I may also keep your email address and phone number on my phone and personal computer. This information is not shared with any person, other than your basic contact details (namely, your first name and phone number) which are disclosed to my two ‘professional executors’, as required by the UK Council for Psychotherapy (UKCP).
Any notes that I make as a record of our sessions are the only ‘sensitive personal data’ (as defined by the GDPR) which I hold about you, but these notes are always anonymised and kept in hard copy only. These notes are kept during the therapy to enable me to improve continuity between sessions, to facilitate assessment, planning and evaluation of progress. I will not share your personal details with any other person or organisation without your knowledge and permission, unless I am required to do so by law.
Your sessions with me may be discussed with my supervisor, but always without disclosing your personal data.
All hard copy personal data and sensitive personal data is stored in a secure filing cabinet at my home address.
I may keep your personal data for up to seven years unless otherwise requested by you. At that time the hard copy will be shredded.
Your protection rights
Under data protection law, you have rights including:
Your right of access: you have the right to ask me for copies of your personal information.
Your right to rectification: you have the right to ask me to rectify information you think is inaccurate or to complete information you think is incomplete.
You have the right to erasure: you have the right to ask us to erase your personal information in certain circumstances.
Your right to object to processing: you have the right to object to processing of your personal data in certain circumstances.
Your right to data portability: you have the right to ask that we transfer the information you gave me to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.
You can also complain to the ICO if you are unhappy with how I have used your data.
The ICO’s address:
Information Commissioner’s office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Helpline number:0303 123 1113
Client’s Consent
I hereby give you consent to hold and use my personal data and personal sensitive data referred to in the above notice for the purposes stated therein.
Client’s Signature:
Client’s Full Name:
Date: