PRIVACY STATEMENT – RUTH HOSKINS
I am registered with the UKCP (UK Council for Psychotherapy) and adhere to the General Data Protection Regulation (GDPR) which means I need to tell you what data I am collecting from you and what I intend to do with it.
COLLECTION AND USAGE OF YOUR PERSONAL DATA
•
I collect personal and sensitive information about you including name, address, email address, telephone numbers, GP/emergency details, date of birth, medical and mental health information.
•
I use the information to provide an effective body psychotherapy service, to contact you regarding sessions and to send you receipts and/or invoices.
•
I keep a record of your attendance and may keep short factual or verbatim notes of our sessions.
SHARING OF YOUR DATA
•
I might share data if required by law, or if ordered to by a court or if you tell me about risk of serious harm to yourself or someone else.
•
I attend clinical supervision where I talk about my work, but I will only use your first name.
•
All payments are recorded in my accounts using your initials and these might be shared with HMRC if I am audited.
•
In the event that I am seriously and unexpectedly incapacitated I would share your name and phone number with a colleague who would contact you.
•
If an external counselling service has referred you, factual notes and attendance details will be provided to them in accordance with their requirements.
STORAGE AND DISPOSAL OF DATA
•
My older records and initial assessment paper records are stored securely in a locked cabinet. My diary is in paper form (where you will be identified only by your initials) and it is kept on my person during the day and in a locked cabinet othewise.
•
My recent records, financial accounts, email, and mobile phone are electronic and are password and anti-viral protected.
•
UKCP requires me to keep psychotherapy notes and your personal information for a minimum of three years. However, in line with HMRC requirements I will delete all data relating to you after 7 years.
ACCESS TO OR CHANGE OF YOUR DATA
•
You can make a subject access request in respect of your personal information held by me by making a request in writing. Once I receive the written request, I will respond within 14 days. If you were referred by a Counselling Organisation such as the Dover Counselling Service, you should address the request directly to them.
•
If during sessions information is provided by more than one individual (couples or group therapy) I will only release information if consent has been given by all individuals involved.
•
You may also request that inaccurate personal data is amended.
CONCERNS
If you have any concerns about how I have handled your data, you can complain to the Information Commissioner’s Office (ICO): ico.org.uk/concerns
Do you consent to the use of personal and sensitive personal data for the stated purposes and fully understand and accept the subject access policy?
Please write yes or no:__________________
Client Name:
Date:
Client Signature: