Last updated: March 2020
What information do we collect and why?
We collect basic personal information about you, such as name, address and contact details to help us keep track of who you are in our records and how to keep in touch. We will also ask for in-depth information about your health. This helps us identify how to tailor the services you request to your needs.
During a one-to-one session you will be asked a range of questions relevant and specific to successfully working with you. You will have the opportunity to refuse to answer each question.
The information you provide is collected solely to provide you with the services you have requested. Any requests for extra information during your use of our services are made only if the information is deemed necessary by your consultant for providing you with the services you have requested.
What we do with your information?
All the personal data we receive from you is processed by your consultant. Any documents or details will be stored electronically in a folder encrypted by your consultant. Any paper documents will be scanned, placed in this folder and the paper originals destroyed.
Any electronic messages will be stored securely.
No third parties have access to your personal data unless:
You say something that implies real danger to yourself or others, your consultant may disclose necessary information to the relevant service.
Your consultant may discuss with their clinical supervisor about how best to assist you in meeting your goals. These discussions are verbal, from memory and in person. Your identity within these discussions will not be disclosed and none of your personal information will be recorded by the clinical supervisor.
How long do we keep your data?
Under English law, we may retain your personal data for up to six years after which time it will be destroyed. This is done to comply with the Limitation Act 1980.
What are your rights?
You have the right to withdraw your consent at any time by contacting your consultant.
If, at any point, you believe the information we hold on you is incorrect, you can request to see this information and have it corrected or deleted. We will respond to your request within 30 days.
If you wish to raise a complaint on how we have handled your personal data, you can contact us to investigate the matter at email@example.com.
If we believe that there has been a breach of your data, we will notify you within 72 hours of the breach being identified.
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).