Information We Collect

We obtain various types of personal information in the course of providing psychological services. This includes personal details such as your name, contact information (e.g., address, email, and telephone number), date of birth, and demographic information. We will also ask about sensitive personal data, such as information about your mental health, medical history and any other information provided during assessment and/or therapy sessions. Additionally, we will also collect correspondence or feedback you may wish to provide. In some cases, we may also gather information from third parties, such as your GP or other healthcare providers, but only with your explicit consent. We do not hold any payment details, as payments for services are made directly via bank transfer to the business bank account.

How We Collect and Use Your Information

We collect your information directly from you during initial consultations, therapy sessions, and any follow-up communications. This may occur in person, over the phone, via message or email, or through online platforms if remote sessions are offered. We may also receive information from your professional referrer, such as GPs or other professionals, with your permission. Your information are processed based on the lawful basis of “legitimate interest” under the GDPR.

The primary purpose of collecting this information is to provide you with psychological support and service tailored to your needs. Your information may also be used for administrative purposes, such as scheduling and maintaining accurate records. However, there may be several situations where disclosure of confidential information is necessary or mandatory, which may include:

• When your psychologist has a significant concern of threats or harm to yourself or from another person, physical or psychological or otherwise.
• Discussing your situation and therapy process in clinical supervision with an experienced clinical psychologist(s). Only non-identifiable information will be shared and the discussion will be kept strictly confidential.
• When disclosure is required by law, under any court orders or lawful demand by enforcement or regulatory authorities.

We will discuss with you first before disclosing any confidential information, unless prohibited by law or court orders.

Data Security

Protecting your personal information is of utmost importance to us in this practice. We receive regular training in data protections and are registered with the Information Commissioner’s Office (ICO). We also regularly review and update my security policies to ensure they remain effective.

Your Rights

Under UK data protection laws, you have several rights regarding your personal information. Clients have the right to access the information we hold about you by making a subject access request, which we will respond to within one month. You may also, at any point, object to us processing or retaining your personal information. Exercising this right may prevent us from being able to deliver any services. Additionally, you also have the right to withdraw consent at any time. Please contact [email protected] should you wish to make such request. You also have the right to lodge a complaint with ICO if you believe we have not complied with legal obligations.

How We Store Your Information

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected. Typically, we will keep records for up to seven years after a client's last session, or longer if required by law or professional guidelines, such as those set by the Health and Care Professions Council (HCPC) or the British Psychological Society (BPS). All data collected from you are stored digitally and protected by password. Any physical records are kept in locked, storage. Once the retention period expires, the data will be securely destroyed.

We may transfer your data to third-party service providers located outside the European Economic Area (EEA) for the purpose of conducting video consultations. Specifically, we use Zoom and Microsoft Teams for online therapy sessions.

• Zoom: While Zoom may process data in the US, it complies with the General Data Protection Regulation (GDPR) by using Standard Contractual Clauses (SCCs) and other safeguards to protect your data when transferred outside the EEA.
• Microsoft Teams: Data processed via Teams is stored within the UK and is fully compliant with GDPR.

Additionally, all other services under Microsoft 365 Business Standard (such as email, document storage with OneDrive) are stored within the UK to ensure compliance with data protection laws.

If you have any questions about how we handle your data when using Zoom, Teams, or other services, please feel free to contact us at [email protected].

Cookies

TTo provide you with a better browsing experiences, we use cookies on our website. Cookies are small text files stored on a device that help the practice track usage patterns, remember preferences, and ensure the website functions correctly. We use both session cookies, which expire when the browser is closed, and persistent cookies, which remain on the device for a set period. You can manage their cookie preferences through browser settings, but disabling cookies may affect the functionality of the website.

Changes to Our Privacy Policy

We reserve the right to update this privacy policy from time to time to reflect changes in legal requirements, practices, or the services offered. Any significant changes will be communicated to you directly, either through email or by posting a notice on the website. The date of the most recent update will be indicated at the top of this policy. Continued use of the practice's services after any changes indicates acceptance of the updated policy.

If you have any questions, concerns, or requests related to this privacy policy or how we handle your personal information, please contact us at [email protected]

Raising Concerns

If you have any questions or concerns about our privacy notice, or if you are unhappy with how we have used your data, please contact us to discuss and, if not satisfied, you may contact the ICO on the below details: