I am committed to ensuring that your privacy is protected. Should I ask you to provide certain information by which you can be identified when using my services, then you can be assured that it will only be used in accordance with this privacy statement.
I may change this policy from time to time and I suggest that you regularly check this page to ensure that you continue to be comfortable with the measures that I am taking to protect your privacy. This policy is updated on 23rd May 2018 to comply with the new Data Protection Legislation, GDPR.
By visiting www.counsellingstourbridge.co.uk (my site) you are accepting and consenting to the practices described in this policy.
For the purpose of the GDPR (General Data Protection Regulation 2018) (the Act), the data controller is Louise Lee, 56 Witton Street, Stourbridge DY8 3YE
What is my lawful basis for processing?
The lawful bases for processing are set out in Article 6 of the GDPR.
I process your information for the following legitimate business interests:
- To confirm appointments or, if you were to not attend appointments, I will send you a reminder text.
- Occasionally to change appointment times or dates.
- Internal record keeping – for example, client hours;
- To operate my business efficiently including financial records;
For therapeutic interests:
- Following your appointment, I may send you ideas from the theoretical models I use. I may arrange this with you in the session or I may do this as an after thought in between sessions. This is to give you a language to assist you in expressing your needs and wants to myself, or in your personal relationships, and to help you to understand your psychological process.
- I need your GP details in the event that you were saying to me that you are going to self harm. depending on the severity of this, I may or not discuss this with you beforehand.
Information I may, or may not, collect
You may give me information about you such as name, email address and phone number, by filling in forms on my site or by corresponding with me by phone, e-mail, text or otherwise. I may receive information about you if you commented on a blog.
With regard to each of your visits to my site, I, nor my host provider, Ian Tomlinson, cannot get any technical information such as IP addresses.
We are not using Google analytics in any way on this site.
I will delete any information that comes onto this site as soon as I read it and this prevents Ian reading your information inadvertently if he was to log onto this site. Ian does not log on to this site unless there was a specific reason to do so however, all of the updates he does for this site are done remotely. I can delete your message that comes onto my site easily. Ian is also a therapist and is bound by confidentiality if he does come across your message before I’ve deleted it.
There is a tick box on the contact form to make it GDPR friendly. You won’t be able to submit the form if this isn’t ticked.
Disclosure of your information / confidentiality
All my dealings with you and any information that I have about you is confidential except when I may have a legal obligation to share, such as terrorism, money laundering and radicalisation.
I take my work to supervision but identifiable information isn’t discussed.
If you disclose that there is a serious risk to your own or someone else’s life, I have a procedure to evaluate the risk with the support of other professionals and would wish to support you in acting to remove that risk. In any case, I will inform the authorities if the risk is evaluated as serious.
If you disclose that a child is currently experiencing or is in danger of experiencing abuse, as defined by the Child Protection Act, I would wish to support you in acting to protect that child. If the abuse is serious I have procedures to act for the benefit and protection of the child that do not necessarily require the source of the information to be revealed.
Whenever possible, if I feel that I needed to suspend confidentiality for one of these reasons, I would discuss the matter with you and arrange appropriate support before any action was taken.
Where I store your personal data
The data that I collect from you will be transferred to, and stored at, a destination within the European Economic Area (“EEA”).
Unfortunately, the transmission of information via the internet is not completely secure. Although I will do my best to protect your personal data, I cannot guarantee the security of your data transmitted to my site; any transmission is at your own risk. Once I have received your information, I will use strict procedures and security features to try to prevent unauthorised access.
It is normal practice for a therapist to write notes on each session. These constitute factual details, reflection on the counselling/therapy process, the making of therapeutic contracts and progress towards goals. With some notice you may view the records of your sessions.
I keep written or word-processed records of sessions. Records on computer are password protected.
I routinely record sessions. I will occasionally use small excerpts from sessions for supervision. The recordings are archived to the same security as written records.
For the duration of our contract, I keep paper records in a locked metal cabinet designed for this purpose. After our contract is finished, I will scan the paper records onto a external hard drive. I reserve the right to use any recorded or written material to defend myself in case of allegations or complaint being made by a client or their legal carer/guardian. For these reasons I do not have a specific retention time for data, other than contact details.
Access to information
You can request access to the personal information that I hold about you. I will provide this except in the limited circumstances in which I am permitted not to. Any access request may be subject to a fee of £10 to meet my costs in providing you with details of the information I hold about you. See ICO Website.
You may request amendments to the personal information I hold about you that is inaccurate or out-of-date. If you request that I delete your personal information, I will do so unless I need to keep it for legal, auditing or internal business purposes.
Complaints, questions, comments and access requests are welcomed and should be addressed to Louise Lee, 56 Witton street, Stourbridge, DY8 3YE firstname.lastname@example.org 07940047913
Data Protection Registration reference: ZA038989