Privacy Policy
Introduction
In order to conduct our work together, it is necessary for me to collect personal information and to make notes about our sessions. I take protecting your privacy very seriously and you can be confident that your personal information will be kept safe and secure. Your information will only be used for the purpose it was provided to me.
I adhere to current data protection legislation: the General Data Protection Regulation (GDPR; 2016), the Data Protection Act (2018) and the Privacy and Electronic Communications Regulations (2003). This privacy notice sets out: ​
-
The legal basis for me collecting and processing your personal data
-
How I will collect and process your personal data
-
How long I store it for
-
What I do with your data
-
Your data protection rights
I am a ‘data controller’, which means I collect and store your persona information and therefore have responsibility for it. I am registered with the Information Commissioner’s Office, registration number XXXXXXXX.
My lawful basis for holding and using your personal information
GDPR states I must have a lawful basis for processing your personal data. There are different lawful reasons depending on the type of information and what I am using it for.
If you are currently having therapy, or in contact with me as you consider therapy, the legal basis for me processing your personal data will be our contract.
If you are no longer having therapy then I will hold your personal data as a legitimate interest.
Some of the data I process may be classed as ‘special category personal information’, which is any sensitive personal information that you may disclose to me appropriately, such as racial or ethnic origin, political opinions, religious beliefs, sex or sexual orientation information and health information. The lawful basis for me processing this type of information is that it is necessary for the provision of healthcare.
Types of information & how I use this information
Initial contact
​
When you enquire about engaging in therapy with me, I will collect information to help me deal with your enquiry. This will include your name, contact details (phone number, email address) and a brief, factual overview of any concerns you listed as reasons for contacting me. Your name, phone number and email will be saved as a contact on my electronic devices for the purposes of contacting you, if necessary. If you would prefer for this not to be the case, please let me know.
If you decide not to proceed, I will ensure all your personal data is deleted within one month. If you would like me to delete this information sooner, please let me know.
While we are working together
​
Everything we discuss is confidential. This is a vital aspect of therapeutic practice and ensures your privacy is maintained. However, there are some exceptions in which it may be necessary to break this confidentiality: ​
-
If you consent to me sharing information
-
My monthly supervision, which forms a part of ethical practice. All information shared will be anonymous in order to protect your identity.
-
If there is a serious risk to you, or someone else
-
Where the law requires it, for example disclosure of terrorism, trafficking or money laundering
If I feel it is necessary to break confidentiality, I will do my best to discuss it with you first, except where the law or safeguarding issues prevents this.
I keep a record of your personal details (name, contact information) for administrative and contact purposes. These details are kept on a secure, password protected, encrypted system and are not shared with any third party. After each session, I write brief, factual notes to ensure I am able to track our work and engage in reflective practice. These are also held on a secure, password protected, encrypted system.
I retain emails, text messages and WhatsApp messages for 1 year before deleting. If you would like me to delete these sooner, please let me know.
After counselling has ended
​
Once counselling has ended all records will be electronically archived and retained for 7 years before being confidentially destroyed. If you would like me to keep any records for longer than 7 years, please inform me in writing. ​​
Third party recipients of personal data
I do not share your personal data with third parties unless necessary, for example, if you are in danger and need emergency assistance.
I do not transfer your data outside the UK.
I make use of information technology services such as Microsoft 365.
Your rights
I respect your rights to your data, and try and ensure you can access your personal data whenever you see fit. You have the right to ask me to:
-
-
Delete information I hold about you
-
Limit how I use your personal data
-
Stop processing your personal data
-
See a copy of any information I hold about you
-
Amend any data that is inaccurate
-
If I do hold information about you, you have the right to ask me to:
-
-
Give you a description of the information I hold and where it came from
-
Tell you why I am holding it, how long I’ll hold it for, and how I came to this decision
-
Tell you who it could be disclosed to
-
Provide you with a copy of the information I hold about you, unless there are lawful reasons I should not
-
You can find out more about your rights at https://ico.org.uk/your-data-matters/
To make a request about your personal information, please send this in writing via email, or to the address:
14 Squires Grove
Bingham
NG13 7AW
Complaints
If you are not happy with the way I collect, handle or process your personal data, you are within your rights to complain to the Information Commissioner’s Office (ICO), the statutory body for data protection in the UK. You can make a complaint here https://ico.org.uk/make-a-complaint. Please do get in touch with me if there is an issue, I would be grateful for the opportunity to resolve the matter together, if possible.
Contact Details
Aimee Parnell
Eucalyptus Therapy
14 Squires Grove
Bingham
NG13 7AW
07392765512​