1. Introduction
In order to provide you with CBT therapy, I need to collect and hold certain personal information about you. This notice explains what data I collect, why I need it, how I store it, and your rights under UK GDPR.
2. What Information Do I Collect?
I collect the following information directly from you:
- Contact details: Your name, address, email, and phone number.
- Emergency contact: Name and number of a person you trust.
- GP details: Name and surgery address.
- Therapy records: Brief, anonymised notes of our sessions and any worksheets we use.
3. Why Do I Need This Information?
- Contract: I need your contact details to manage our appointments and provide the therapy service you have requested.
- Health Treatment: As a therapist, I process "Special Category Data" (your mental health information) to provide you with clinical treatment.
- Vital Interests: I hold your GP and emergency contact details in case of a serious clinical emergency where your safety is at risk.
4. How Is Your Data Stored?
I take your privacy seriously and use the following security measures:
- Email: My business email is password-protected and used for scheduling and sending worksheets.
- Anonymised Notes: Clinical notes are kept separate from your contact details using a unique client code. These are stored on a password-protected device.
- Data Retention: I am required by my insurance provider to keep your records for 7 years after therapy ends, after which they are securely destroyed.
5. Who Do I Share Your Data With?
Your information is confidential and I will not share it with third parties, except:
- Clinical Supervision: I discuss my work with a supervisor to ensure high standards of care. You are always kept anonymous in these discussions.
- Legal Obligation: If I am required by a court of law to share information.
- Safety: If I have serious concerns about your safety or the safety of others, I may contact your GP or emergency services. I will always try to discuss this with you first.
6. Your Rights
Under UK law, you have the right to:
- Ask for a copy of the information I hold about you.
- Ask me to correct any mistakes in your data.
- Withdraw your consent for me to contact you (though I may still need to keep your records for legal/insurance reasons).
Complaints: If you have concerns about how I handle your data, please contact me directly. You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.