This is the text of the privacy notice that I will ask you to sign if we decide to work together:
I am registered as a Data Controller with the Information Commissioner’s Office (ICO). I collect, store and process information about you including your name, date of birth, contact details, payment information as well as personal information about you (‘special category data’). I keep brief notes recording the themes of our sessions. I have to do this in order to run my psychotherapy practice and to provide a safe, ethical service to you. I do this on the lawful basis of ‘legitimate interests’ for the purposes of health and social care.
You have the right to view this information, which I would provide to you within one month of request, and to ask for changes to be made.
I may use this information to track the progress of our work together or as the basis for discussion in supervision, for reflection and guidance in a way that respects and protects your anonymity. My notes are handwritten and stored under lock and key. I may keep them for up to 7 years following the date of our last session, as per my insurer’s terms and conditions or advice, at which point they will be securely destroyed.
Your contact details are kept for 6 months after our work finishes and then destroyed unless agreed otherwise.
Any texts or emails will be deleted not later than one month after receipt unless they form part of your notes or are needed for income tax purposes in which case they will be kept for 7 years.
I will keep your telephone number on my phone under your initials (but not in my phone's address book) until your sessions end at which point it will be deleted. If I change phones then your details will be deleted on the old phone. I note your appointment in my paper diary using your initials.
There are some exceptional circumstances in which I may be legally and/or ethically required to share certain information about you or our sessions together with a health professional or legal representative. However, I will attempt to discuss this with you first.
I would also have to pass on your name and contact details to my Therapeutic Executor if I was seriously incapacitated and unable to work or communicate directly with you.
You have the right to withdraw your consent for me to hold and process information about you at any time. In this case we would need to discuss the implications for our continued work together.
If you have any concerns or questions about the contents of this notice, please discuss them with me. You may contact the ICO here: https://ico.org.uk/concerns/ if you are not satisfied following our discussion.