This policy outlines the rights that data subjects have, under the General Data Protection Regulation (GDPR), in relation to the data about them that I hold.
B) The right to be Informed
As part of my clinical practice I keep a digital address book, digital and occasional written notes of sessions, audio recordings of sessions and I keep a handwritten diary. My legitimate interest for retaining this data is to provide the best service possible. Clients provide explicit written consent agreeing to my recording of sessions.
All data processed by me is solely for my legitimate interests and your personal data is only shared with third parties under the following circumstances:
- To provide further treatment for you, e.g. a referral to another health professional
- When we have a duty to others, e.g. in safeguarding cases including child protection.
- When you provide written consent.
Data will be kept in accordance with United Kingdom Council for Psychotherapy (UKCP) guidance.
C) The right to access
You have the right to access your personal data held by me. You can request access to your data by contacting me. This will be provided within one month.
D) The right to ‘Correction’
If you discover the data I hold about you is incorrect or incomplete, you have the right to have the data corrected. If you wish to have your data corrected, you should contact me. This will be provided within one month.
E) The right of ‘erasure’ and the right to ‘restrict processing’
You have the right to have personal data erased and to restrict processing, you can request to do either by contacting me. I will consider each request individually, however you must be aware that processing may continue. Where this happens you will be informed of the continued use of your data and the reason for this.
F) The right to ‘data portability’
Due to my legitimate interests and the method of data processing this is not applicable to you.
G) The right to object
You have the right to object to the processing of your personal data in certain circumstances. If you wish to object you should do so by contacting me.
H) The right not to have automated decisions made about you and profiling.
I do not currently make decisions about you using any automated system with no human intervention.
I) Registration with the Information Commissioner’s Office
I am registered with the ICO in accordance with the UK General Data Protection Regulation.
End of document July 2021