Frequently Asked Questions And Terms And Conditions Of Receiving Treatment

What is the General Data Protection Regulations, 2018 (GDPR) and how does it affect me?

The GDPR replaces the 1998 Data Protection Act to ensure your personal and sensitive, confidential data is kept private and held securely, being processed in the way that you have agreed to. It is there to protect your rights as a consumer of a service or product that might involve your identifiable data, e.g. your name and address or whether you have a specific condition. It also covers any session records, text messages or emails we exchange. For more information your can read the policy documents accessible via your welcome information pack.

How long will you hold my information for?

I am regulated by the British Association for Counselling and Psychotherapy (BACP), an organisation that stipulates in their ethical framework that we will hold notes. These session notes are electronically stored and deleted within a week of the contract ending. Hard copies of the contract and contact information form are shredded at the same time. Phone, text and email correspondence is deleted every 1-3 months.

What if I don’t want my records to be held for that long?

Under the GDPR you can make a request in writing to me, for all your records to be deleted. In this case all your paper records would be shredded with a cross shredding machine and any electronic data such as emails or text messages, session notes would be permanently deleted from the devices they are stored on. As the practice of keeping notes is a requirement I am obliged to keep, if you did exercise your right to erasure, then the contract would automatically be cancelled as I can no longer provide the service. I would have to save the request for deletion you made but would not save any other data. In some circumstances my insurance companies legal team may want to verify information I process.

Why do you need to record this information?

I collect information about; why you are using the service, a small amount of medical information and a small amount of information about your important others, alongside brief session notes. This information enables me to provide a high quality service to you, ensuring I am equipped with the knowledge of our previous discussions prior to each session. Your contact details / address and Doctors details will only be used with your explicit consent. I only take next of kin details in case of an emergency in which you desire me to make contact with them on your behalf- this is optional.
See consent form below.

What lengths are made to ensure my information is held securely?

Hardcopy documents – Are all stored in a locked cabinet.
Text messages – My work phone is secured with a 6-digit pin code, fingerprint ID and is encrypted.
Emails – My email account requires a user name and password and SSL Security.
Email attachments – Any attachments sent by email to you containing your personal information would be password protected and the password would be sent to you via text message.
Electronic documents – Any electronic documents e.g. A letter to your GP, or an invoice, session notes are password protected and stored on a password protected and encrypted computer and memory stick if they contain personal or sensitive information.
Website contact­—My website has an SSL certificate therefore ensuring protection between browser and server.

Is what we discuss kept confidential?

Everything we talk about during our sessions are strictly confidential between you and me. To ensure I am doing my job effectively and that I have the right support, I may discuss elements of our sessions with my supervisor. During these discussions I do not disclose any details that may identify you to my supervisor, apart from first name, age and location of practice. My supervisor also adheres to the GDPR.

What if I see you outside of the session?

If we see each other outside of a session I will not make contact with you unless you make first contact with me. I will take my cue from you. I will essentially treat you as a someone I have never met before to protect your confidentiality, unless you make first contact with me, in which case, I will not disclose that you are my client to any other party. I will return an acknowledgement, however, I will not engage in any further conversation to ensure your confidentiality and professional boundaries. You are welcome to share with other people about the therapy you are receiving, but I am obligated by GDPR law to ensure your confidentiality is protected. I would request that in order to ensure the success of your treatment, that you refrain from discussing your treatment with me outside of your sessions.

What about other Health and Social Care Professionals?

As I adhere to the GDPR any contact, relating to you, with other health care professionals would only be made with your signed consent. E.g. If I were to write to your GP to notify them of your treatment with me, and then notify them of the treatment ending, I would only do this if you were to sign the specific consent for this at the end of this document.

Exceptions:
In order to safeguard you and the people around you, if you were to disclose that you were going to carry out harm to yourself or someone else, then under my “Duty of Care” I am obligated by law to inform the relevant authorities. This is to support you to live well, and I would always aim to discuss this with you prior to contacting anyone.
If I was issued with a police warrant or court order for your information, by law I would also have to provide them with your information.

Previous Page