
Image (above) by Jack Redgate via https://www.pexels.com/@jack-redgate-333633
A) GDPR Agreement:
This GDPR agreement sets out how any personal data I collect from you, or that you provide to me, will be stored, and processed confidentially.
B) How I gather your personal information
- Information that you provide me via email, website contact forms, directories, platforms, telephone, or text.
- Information provided to me when receiving referrals made on your behalf, from GPs, employers, or other organisations, via email, website contact forms, directories, platforms, telephone, or text.
- Pre-therapy questionnaire forms or risk assessments.
- Session notes.
- Please note: the online platform I use for online counselling is Zoom. Although zoom is a securely encrypted platform, it has several features in use that may raise concerns around how I access and hold data. For clarity on these features:
- Zoom has a feature to record sessions which I will not use during our work together.
- Chat transcripts / therapeutic email chains will be destroyed either: after the session or after therapy has finished, agreed by both of us.
C) Where I store your personal data
- Personal data that I collect from you via any form of contact will be kept securely.
- Any forms completed, such as risk assessments and brief session notes are stored electronically, and password protected.
- The brief session notes are anonymised, with no names used, and are stored electronically and password protected, separate to information containing your identifiable details.
- I take all reasonably necessary steps to ensure that your data is treated securely and in accordance with this policy.
D) How I use your information
- I use your contact details to allow me to provide you with information about the service I provide, in line with your expressed interest or referral.
- To allow you to tell me about changes in your availability
- To notify you about changes to my availability and any other relevant administrative changes.
- To update you with the progression of safeguarding concerns actioned.
- I use session notes to carry out obligations arising from the agreement entered between you and I, applicable to all policies and the initial contracting of our work together.
- As part of my commitment to providing a professional service and uphold my ethical duties, I attend regular supervision. Supervision is confidential contract between me and my supervisor, with limits arising from legislation and ethical and moral duty of care. To protect your identity, I use pseudonyms.
E) How long I keep your information for
- Text communication is deleted immediately
- Emails are cleared once a month.
- You telephone number is deleted from my work phone once our work together ends.
- I will retain your any forms completed and sessions notes for as long as we are working together.
- I retain these documents for a further five years as per requirement of my indemnity insurance and in case you wish to return for more support.
- The documents are destroyed after specified time.
F) Your rights
- You are entitled to view, amend, or delete the personal information that I hold. All requests have a month to be carried out.
G) In the event of a data breach
- Data breaches should be reported to the Information’s Commissioners Office (ICO) and as such, I have a legal obligation to report a data breach to you and the Information Commissioner’s Office (ICO) within 72 hours.
H) Disclosure of your personal information
- In the event of my incapacity or death, your personal contact information will be disclosed to my clinical executors of my Professional Will so that they can notify you.
- In the event of my death my executors will also destroy all contact information and notes on my computer.
- I am under a duty to disclose / share your personal data to comply with any legal obligation. For example, if I am subpoenaed to court, or if there is a safeguarding concern relating to a children or vulnerable adult, terrorism, drugs trafficking or money laundering.
I) Changes to the GDPR agreement
- I will notify you of changes I may make to this privacy policy in the future.
J) Consent to the GDPR agreement
- Your use and undertaking of the services of Feeling Out Loud constitutes your approval and acceptance of this agreement and are consenting to my use and storage of your personal information you have disclosed to me, as detailed above.
- You have the right to withdraw your consent at any time.