|
|
PRIVACY NOTICE
The General Data Protection Regulation (GDPR) is the most significant piece of privacy and data protection in twenty years, taking effect from the 25th May 2018. From that date I am required to ensure that I gain data protection and privacy consent from you. Your consent is sought at the end this notice.
This Privacy Notice explains how I, Jessica Bowers, use and protect any information that you give me when you inquire about and/or use my psychotherapy services. I am registered with the Information Commissioner's Office (ICO) for safe keeping of this information. I understand GDPR practices and abide by them.
I am committed to ensuring that your privacy is protected. Should I ask you to provide certain information by which you can be identified then it will only be used in accordance with this privacy statement.
Information I may collect
You may give me information about yourself such as, but not limited to: name, address, email, phone number, date of birth, GP contact details, brief information about you and your immediate family member(s) health history, family and support structures, medications prescribed and non-prescribed, eating and sleeping patterns, and goals for therapy. I will record session attendance and a brief general overview of what was covered in the session.
Why is data processed and stored?
Contractual:
To manage my relationship with you
To fulfil our contract
To deliver services
To manage payments
Consent:
To manage sensitive data as a (BACP) healthcare professional
Statutory/Legal:
To fulfil legal duties
To keep records
To ensure safeguarding
To comply with professional regulations and standards
How is data processed and stored?
Electronically, in accordance with GDPR. Computer storage of minimal data, such as emails from you, is only accessed by me through a password protected email account. Paper files are securely stored in a locked filing cabinet. Mobile phone contact details are held on a password protected mobile device.
When is data processed and stored?
During our contract
When it is in your best interest e.g. to fulfill our contrac
When I have a legal duty e.g. safeguarding concerns
When it is in my legitimate interest e.g. running business, paying taxes
When you consent
How long and why is data kept?
When we have finished our work together, your information will be put in to archive storage, and subject to restricted processing. Records will be retained in line with my insurance company and governing body policies. Retention is a legal duty, necessary in case there are legal proceedings or complaints for which documentation is required. Records will be disposed of/deleted securely according to legal requirements.
Disclosure of your information
Any information I record about you is confidential and collected to carry out my professional and contractural obligations during our therapeutic relationship. I maintain confidentiality in accordance with the British Association for Counselling & Psychotherapy (BACP) Ethical Framework for the Counselling Professions; this can be viewed at http://www.bacp.co.uk/events-and-resources/ethics-and-standards/
If I have safeguarding concerns regarding either yourself, children or other people that you are in contact with, I may need to share this information with other agencies. I will endeavour to gain your consent if these situations arise, but I retain the right to break confidentiality without prior consultation with you, should I consider that the urgency of the situation requires me to act immediately to safeguard the physical safety of yourself or others.
I am obliged to share information if the courts order me to do so. Your consent will be sought where possible, and in writing. I have a legal obligation to report any information that relates to terrorism, money laundering and radicalisation.
Access to information
You can request access to the personal information that I hold about you, and you can transfer that information to a third party if you wish. I will provide this, except in the limited circumstances in which I am permitted not to. You may request amendments to the personal information I hold about you that is inaccurate or out-of-date. If you request that I delete your personal information, I will take all reasonable steps to do so unless I need to keep it for legal, auditing or internal business purposes.
Contact
Complaints, questions, comments and access requests should be addressed to info@jessicabowerscounselling.co.uk.
You can contact the ICO on 0303 123 1113, or find other ways to contact the ICO via ico.org.uk.
Consent
By signing this form, you are confirming that you have read this Privacy Notice and that you are consenting to me holding and processing your personal data for the above purposes. You can withdraw or change consent at any time by contacting me.
|
