Information Requested and Secure Storage With the client’s permission, I retain the following information:
Doctors details if supplied
The above are used to make/maintain contact regarding appointments, or when there is a considered risk to yourself or another only, and will not be shared with anyone else at any time. They will be securely destroyed at the end of our contract.
Basic information about family background, e.g., marital status, progeny, family of origin, may be kept if relevant to our work. This is used only to inform our therapy sessions and is kept under an anonymised code.
Your personal information is stored securely under lock and key,at a separate location to any session notes. Your phone number and email are stored in my password protected phone under your personal code. I have password protection and/or encryption on all devices that use electronic data, e.g., computer, phone, tablet, and my email account is password protected. No-one apart from myself has access to passwords on devices, so if we communicate via email or text, you can be assured of confidentiality. I will only keep such communications for as long as necessary, e.g., to process your request, and they will then be deleted. I make brief, handwritten notes of sessions as an aide-memoire and for case discussion purposes. These notes are kept under an anonymised, non-identifiable client code; in the case of letters/emails to third parties requested by clients, a copy is retained with any personal information securely redacted. My notes are retained for 6 years (as a requirement of my insurance) and are then securely destroyed. All your data is used in a safe and ethical manner in line with EU General Data Protection Regulations May 2018 (GDPR). It is not shared with other people without your consent.
Right to Access
You have a right to ask for a copy of your personal information, free of charge (for the first request), in electronic or paper format. You also have the right to ask me to amend or change any incorrect information about you. I reserve the right to charge for any subsequent requests for your personal information.
Right to be Forgotten
You have the right to ask me to erase any information that I hold about you. This includes your personal information that is no longer relevant to original purposes, or if you wish to withdraw consent. In all cases and when considering such requests, these rights are obligatory unless it is information that I have a legal obligation to retain (e.g., for clients aged under 18).
As the client, you have the right to receive your personal information which you previously provided. You also have the right to transfer that information to another party. For the purposes of the GPDR 2018, the “data controller” is Josephine Bird.