I aim to be fully compliant with current GPDR legislation and to let you know how I use and protect the personal information and data that you have given me. I follow guidance from my governing bodies the UKCP and the BACP.
I will use your contact details to respond to messages from you, or to inform you of pertinent information between sessions, if/when required. If you have used emails to make contact with me, your address will have been stored on my hard drive, which is password protected. If we communicate via mobile phone your identification is anonymised and the phone is used solely for work and is pin protected. All data on paper format is stored securely in a separate locked cabinet.
I keep minimal content notes which are anonyised and kept in a locked cabinet separate from any factual or identifying data.
Any drawings or art done during the sessions is yours. If asked by yourself, I will store this material safely. I will never use any of your data/artworks for writing, publishing, research or training purposes without prior written consent.
How long personal data is stored
Your personal details and session notes are held securely for a period of 5 years after our final session. After this time, everything is shredded and disposed of.
Your phone number and any messages/emails from you, or to you, are also permanently deleted after our final session.
You have a right to see the information I hold about you should you wish to. You have a right to change any information which you consider to be incorrect. You can also ask me to delete all/any of the information that I hold. You may withdraw consent at any time without detriment. There are however some details I need to keep due to legal and professional obligations.
Exceptions to confidentiality
As your GP holds clinical responsibility for your mental and physical health, I may contact him/her if I am concerned about your risk of harming yourself or another. I will, whenever possible, inform you of my intention.
I am required to attend regular supervision of my work, but no full names or personal identification will be disclosed. When I share client material or images this is always done confidentially, protecting your identity.
If I am required to do so by law.
In the event of a complaint
Please contact me directly. And if we cannot resolve this you could then contact the Information Commissioner Office ( ICO). I am registered with them and my reference is A8329950 Their address is: https://ico.org.uk/concerns/handling/ or Guidance for GDPR Compliance.