Privacy Policy
Data Protection Information (including the new GDPR 25.05.18)
What information I may hold:
(1) Your Name & Address
I use this information to contact you, to send you invoices etc. Also, an awareness of where you live, so that I can lessen the occurrence of accidental meeting outside of the therapy room.
(2) Your Contact Telephone numbers and Text Messages (sent/received)
I use this information to contact you and to receive contact from you.
(3) E-mail address and e-mail correspondence (sent/received)
E-mail addresses for contact and related matters. As with text messages there may be times when e-mails are kept for reference.
(4) GP contact details
GP details are kept in case of emergency. This is also covered in my confidentiality statement.
(5) Emergency Contact persons phone numbers
These are taken and kept in case of emergency (ill health or distress) where I may deem it appropriate that you are accompanied from the session.
(6) Session Notes
During our work together I make brief, handwritten notes after every session as a record of the work or as a reminder to myself.
All data held by me is kept secured in line with data protection principles and UK law. More information on the data protection acts can be found on the ICO website – https://ico.org.uk/for-the-public/. More information on the new changes can be found here – https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/
Data Retention Policy:
The schedule for retention and destruction of data held:
| Data held: | Retention/Destruction Period: |
| Contract/Data Protection Forms | 7 years then destroyed * |
| Name & Address | 7 years then destroyed * |
| Telephone No – Texts sent/received | 6 years then destroyed * |
| E-mail and messages sent/received | 6 years then destroyed * |
| GP Contact Details | Up to the end of therapy then destroyed |
| Emergency Contact Details | Up to the end of therapy then destroyed |
| Brief notes I may make | 6 years then destroyed * |
* The above data is retained to either comply with a legal obligation or for the establishment, exercise or defense of legal claims.
You have the right to request a copy of the data held or request any corrections that you feel are warranted. All requests received should be actioned within 28 days. I will also need to check the validity of the request (to the best of my ability) to safeguard your data from misuse. Unless I am informed of changes in the data then you cannot be fully protected under the GDPR, but the data I hold will continue to be held in line with the GDPR.
If you have a concern about how your data is being handled, then you have the right to complain to the ICO (Information Commissioner’s Office) https://ico.org.uk/concerns/
The Data held is never be shared with third parties except for legal reasons.
