Clinical Psychologist
Privacy Policy
On 25 May 2018, the law changed with regard to how organisations have to protect your ‘data’ (personal details and records) and this is called the General Data Protection Regulation or GDPR. The following summary highlights how I implement GDPR, by explaining why confidential information is held and how this is protected. https://ico.org.uk
I provide psychological services, including psychological assessments and therapy. You will be asked to provide personal and sensitive information. By engaging with this service you are consenting to records being kept.
What personal data is processed?
I collect and process the following personal data from therapy clients:
Personal data: Basic contact information including name, address, email, contact number and GP contact details.
Sensitive personal data: Signed therapy contract agreement, therapy records (therapist notes, letters, reports, drawings, outcome measures).
If you are referred by your health insurance provider, solicitor, rehabilitation company or other health-related agency, then I will also collect and process personal data provided by that organisation. This includes basic contact information, referral information, health insurance policy number and authorisation for psychological treatment.
I therefore act as a ‘Data Controller’, and by law I am required to be registered with the Information Commissioners Office (ICO). This register is an online public register of Data Controllers and visible for anyone to check. https://ico.org.uk
The lawful basis for processing personal data
I have a legitimate interest in using the personal data and sensitive personal collected to provide health treatment. It is necessary to provide psychological assessment and therapy to clients.
I may also ask for information on how you found the service for the purpose of marketing research. No information you provide is passed on without your consent. I will never sell your information to others.
What is done with your personal information?
I will use the information collected to provide psychological assessment and therapy services to you.
I take your privacy seriously and will only use your personal information to provide the services you have requested. I am committed to protecting and respecting your privacy. If you do not provide the personal information requested, then I may be unable to provide a service to you.
How long will personal information will be stored?
I will only store your personal information for as long as it is required. Basic contact information held on my mobile phone is deleted within 6 months of the end of therapy. The sensitive personal data defined above is subject to special legislation: Adult records are retained for 8 years after the last contact with the service. Children’s records are kept until age 26.
www.gov.uk/government/publications/records-management-code-of-practice-for-health-and-social-care
After this time, this data is carefully disposed of at the end of each calendar year. Some records may be held indefinitely if there were any issues of concern that could lead to police investigation in the future.
Who may personal information be shared with?
Keeping records is an essential component of healthcare, which helps in understanding how best to help and forms the basis of any reports needed. I will hold information about clients and the therapy they receive in confidence. This means that I will not normally share your personal information with anyone else. However, there are exceptions to this when there may be need for liaison with other parties.
If you are referred by your health insurance provider, or otherwise claiming through a health insurance policy to fund therapy, then I will share appointment schedules with that organisation for the purposes of billing. I may also share information with that organisation to provide treatment updates.
In cases where treatment has been instructed by a solicitor/rehabilitation company, relevant clinical information from therapy records will be shared with legal services as required and with your written consent. I will share appointment schedules with that organisation for the purposes of billing. I may also share information with that organisation to provide treatment updates.
In exceptional circumstances, I might need to share personal information with relevant authorities, for instance:
-
When there is need-to-know information for another health provider, such as your GP
-
When disclosure is in the public interest, to prevent a miscarriage of justice or where there is a legal duty, for example a Court Order
-
When the information concerns risk of harm to the client, or risk of harm to another adult or a child. I will discuss such a proposed disclosure with you unless I believe that to do so could increase the level of risk to you or to someone else.