Privacy Notice 

Under the General Data Protection Regulation (GDPR), to comply with the Data Protection Act of 2018, I am designated a data controller, which means I process information including your name and contact details. I also keep session notes - themes and dates of sessions. These are anonymised and kept separately.

This data is stored in encrypted files and will be destroyed after five years in accordance with guidelines from the professional bodies whose standards I adhere to.

Your contact details will be accessed by a clinical supervisor, only in the event of my sudden illness, accident, or death so that you may be informed of such an eventuality. Any other access to this data would only be granted if obliged to by law. It will not be forwarded to any third parties, unless for onward referral or continuity of care, which would be discussed with you.

The purpose of holding this data is for standard administrative processes of a pscyhotherapeutic service. The basis on which I process your data is consent.

You have rights in relation to this data including: the right to withdraw consent; the right to access; the right to erasure of data; and the right to ensure that the personal data is accurate and up to date.

You can find a full list of your rights at www.ico.org.uk under “Your data mattters/Your rights.”

You can also contact the Information Commissioners Office (ICO) if you have any concerns about how your data is processed.