Privacy and Data Management Statement
I aim to be fully compliant with current GPDR legislation and to let you know how I use and protect the data you’ve given me. GDPR replaces the previous Data Protection Act. I wish to be transparent with regard to the processes I have in place. Identifiable information, if shared, will only be used in accordance with this privacy statement. I follow guidance from my governing bodies (UKCP) and my insurance provider. I am registered with the Information Commissioners Office (ICO) and my registration number is ZA217225When you agree to undertake counselling, psychotherapy or any other form of psychological consultation with me, you will be asked to consent to the processing of your data under the terms of this policy.
What Information Do I Collect?
I collect personal data such as name, address, date of birth, gender, GP/medical practitioner details, telephone number and e-mail address. I may also collect any data you give me regarding personal history and family background, alongside potentially sensitive data relating to medical and mental health conditions.
What Do I Use Your Information For?
* To provide counselling, psychotherapy and other forms of psychological support - which includes writing brief handwritten notes after sessions.
* To notify you about any changes to your appointment times or the services I provide.
* To fulfill any administrative, legal, ethical and contractual obligations.
* To occasionally share resources (eg. website links, book recommendations) with you relevant to any work I am undertaking with you.
What Information Do I Share?
I will not share any information about you with other organisations or people except in the following situations:
* Supervision. I discuss my client work on a regular basis in supervision, and this is in the context of a professional relationship with a view to safeguarding and developing my practice.
* Consent. I may share information with relevant medical professionals or others whom you have requested or agreed I may contact.
* Serious Harm. I may share your information with the relevant authorities if I have reason to believe this may prevent serious harm being caused to you or another person.
* Compliance With Law. I may share information when the law requires me to - ie. safeguarding, terrorism, drug trafficking and serious crime.
* Clinical Will. I have a clinical will which means in the event of my sudden death or a serious accident or illness that renders me incapacitated, a named colleague will be able to access the contact details of my clients and notify them.
How Do I Keep Your Information Safe?
* All information you provide to me is stored as securely as possible. I take all reasonable precautions to prevent the loss, misuse or alteration of information given.
* All paper forms, notes and correspondence are kept in locked filing cabinets and all electronic files are kept on password protected devices with virus protection software.
* Any formal reports I write are password protected.
* For webcam appointments I recommend we use VSee which is a secure platform.
* Client notes and any other forms of documentation are destroyed seven years after the completion of counselling, psychotherapy or any other psychological support services offered. Any drawings or writing that you do as part of our therapy will be stored securely with your notes for the duration of the therapy. Once therapy completes we will decide whether you want to keep them or have them securely destroyed.
* Any known data breaches will be reported to the ICO within 72 hours.
* Any requests for personal data need to be made through a subject access request will be supplied within one month.
* My website, www.wellmeadowtherapy.co.uk, is maintained by Webhealer. Your details are not stored on their systems for any contact requests made through them. The website does not require cookies to function properly.
Your Rights
Under the GDPR, you have the right to :
* Access your personal data; rectify erase or restrict your data; object to the processing of your data; request transfer of data (data portability).
* You may withdraw your consent for me to hold or process your data at any time. However, if you do this whilst actively receiving counselling, psychotherapy or other psychological support services from me these would have to end. You can withdraw your consent by stating this via email to kateblockley@yahoo.co.uk
* If you have any concerns about the way I handle your data, please discuss with me in person or by email. If you feel this has not been resolved effectively you have the right to contact the Information Commissioners Office (www.ico.org.uk).
* Any complaints about my clinical practice can be taken up with the UKCP through their professional conduct procedure. However, I would always encourage you, in the first instance, to discuss with me in person any aspects of my services that you are unhappy with.
Changes To This Policy
This document is a work in progress and may be amended from time to time.