Privacy Policy

---

 Data Privacy Policy

​

Information on this page explains why I keep certain information, where I keep it, how I keep it safe, as well as what your rights are.

Essential Information 

· I only keep information about you in order to provide you with a service, and to process any payments.

· I am unable to work with you unless you allow me to keep certain records.

· I abide by the law, and the codes of practice drawn up by the HCPC and the BPS

· I have systems in place to protect your data 

· You are entitled to request a copy of the data held in relation to you free-of-charge, and to have inaccurate information corrected.

· I aspire to the highest data privacy standards. If you have questions, concerns or feedback then please contact me in order for me where appropriate to address these.

· You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Why I keep information

​My professional registration (Practitioner Psychologist – HCPC) requires me to keep information about my clients and the work that I do. I cannot offer you services unless you allow me to keep certain data pertaining to you and our work together. I am registered with the Information Commissioners Office (ICO) to do so.

I follow the rules set out by my professional regulator (the Health and Care Professions Council; HCPC), and the British Psychological Society (BPS). The information that I keep includes personal data e.g. your name, address, phone number. I also keep sensitive data e.g. notes about our meetings, your gender, social/developmental history.

What type of data do I keep

• Identity Data includes first name, last name, email address and job title.
• Contact Data includes country, billing address, email address and telephone numbers.
• Financial Data includes bank account and payment card details.
• Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
• Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.
• Sensitive Data includes information about your health, including information about your existing and previous medical conditions, medication details, psychiatric history and any other relevant health information to enable us to carry out our services to you. We only use your sensitive data to provide the services to you.

I may require your explicit consent for processing sensitive data, so when you submit your details,  I will send you a further communication asking for you to confirm your consent to this processing.

What I do with the information

I use the data I collect for three reasons: (1) to provide you with services, (2) for billing and processing payments (3) to help prevent serious harm.

How long I keep data

I keep client data throughout the time I work with my clients and, in line with professional guidance, for 7 years after the work has ended.

Where I keep data

· In my file storage cloud: Google Drive

· On my laptop

· In a paper file

· In my mobile phone

· In my email systems

· My website uses cookies so that I can see how many people have visited and which pages are most popular. Google may send additional cookies if you use the google map links on the site. Cookies are anonymous and contain no personal data. You can turn cookies off in your website browser if you wish to.

​

How I keep data safe

· My accounts are locked with a strong password and two-step verification.

· My laptop is encrypted using Bit-Locker

· My paper notes are stored in a locked cabinet. I bring them to the clinic for our meetings, and return them to         

   the cabinet after the meeting.

· My mobile phone is encrypted, and must be opened with a passcode or face ID or fingerprint each time I use 

   it.

· My email systems are secured with a password and two-step verification.

· Access to the analytics on my website are secured with a strong password.

· All my passwords are stored in a password manager on my phone.

· I use Authenticator software on my phone to generate two-step verification codes.

Your rights:

· You can request details of all the information that I keep pertaining to you and to receive it within one 

  month at no fee.

· To have information corrected if you consider it inaccurate or incomplete.

· To complain if you think that I am acting unlawfully (see Information, above).

Updated September 22