I am committed to protecting the privacy and security of your personal data.
This privacy policy describes how I collect and use personal data about you and after your relationship has ended with me, in accordance with the General Data Protection Regulation (GDPR).
In GDPR terms, I hold the data, This means that I am responsible for deciding how I hold and use personal data about you. I am required under data protection legislation to notify you of the information contained in this privacy policy. I may update this notice at any time. It is important that you read this and any subsequent notice, so that you are aware of how and why I am using such information.
What personal and sensitive personal data do I hold?
The personal data I collect directly from you maybe as follows:
- Your contact details (name, date of birth, address, telephone and mobile numbers, email addresses)
- GP Surgery contact information
- Information about any ongoing medical conditions and prescribed medication
- session dates, please note, I dont keep session notes apart from referrals or safeguarding concerns.
How is it collected?
The data is collected directly from you via a Client Information Form or via direct email/telephone contact with me at the onset of any work.
Why is it processed?
All personal and sensitive personal data will only be used in order to provide the service to you and for managing the service I provide.
What is the lawful basis?
The lawful basis for processing your personal data is always either contractual (to deliver the service) or through your consent.
With whom will it be shared?
As a part of the regulations of my professional bodies, BACP (British Association of Counselling & Psychotherapy) I have regular supervision, where I share anonymised information about you to support my clinical thinking and to uphold professional standards.
How long will the data be held?
Records are kept for a period of 3 years and are then deleted and/or destroyed.
How is the data secured?
All information you provide me is stored as securely as possible. All paper forms and correspondence are kept in locked filing cabinets. All electronic records are stored on my computer, all access to which requires password-protected authentication. Telephone numbers are stored using first name and initials only; this is also passcode protected and only accessible by me.
Unfortunately, the transmission of information via the internet is never completely secure. Although I will do my best to protect your information using industry-standard protocols and encryption, I cannot guarantee the security of your data transmitted to me via email and any transmission is at your own risk. Once I have received your information, I will use strict procedures and security features to try to prevent any unauthorised access.
What are your rights?
You have the right to ask me to provide a copy of the information that I hold. You also have the right to require me to correct any inaccuracies in your information. If you would like to do this, please contact me. You may withdraw your consent for me to hold and process your data at any time.
Data protection concerns and complaints
If you have a concern about how I have handled your personal information, you can make a data protection complaint by contacting me using these email addresses – Janthomsontherapy@gmail.com or info@janthomsontherapy.co.uk
I will acknowledge your complaint within 30 days and take appropriate steps to look into it without undue delay.
Please include:
your name
what your concern is about
what you would like me to look into
how you would prefer me to respond
I will investigate your complaint as appropriate, keep you informed where necessary, and tell you the outcome without undue delay.
If you are not satisfied with my response, or if you would prefer to contact the UK regulator directly, you can contact the Information Commissioner’s Office:
Information Commissioner’s Office
Website: www.ico.org.uk
Telephone: 0303 123 1113