Privacy Policy

If you do decide to work with me I will hold your personal data in accordinace to GDPR. My insurer requests that I store personal records for 7 years.

 

Personal records (Intake Assessment form and signed contract) containing personal details e.g. contact details are stored seperately from session case notes - I am obliged to store brief objective notes on sessions that take place, as evidence that something happened and as a mental prompt to look back on to see the main points previously covered.

 

If you submit personal details as part of initial enquiries and then decide not to begin working with me then I destroy the personal details that you have submitted.

 

I am registered with the Information Commissioner's Office (ICO).

 

For the purpose of the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) superseding the Data Protection Act 1998 (DPA, the Act) I (Emma Ross) am named as the Data Controller (address available on request).

Your details will be stored and kept securely and confidentially in a safe filing system, with hard-copy documentation in locked filing cabinets.

 

Anonymised session hours, dates and brief case notes are used as evidence of practice. These are held securely on a password protected USB flash-drive that provides data security with Federal Information Processing Standards' FIPS 197 certified AES 256-bit hardware encryption.

 

Some of this anonymised information will be used in future for completing my statements when applying for and renewing accreditations.

- Information provided by you

You may provide information about yourself by corresponding with me by phone or email, or other means. This includes information you provide when you subscribe to my blog, comment on a blog post or send a message through my contact form, and when you report a problem with my site. The information you provide may include your name, address, e-mail address and phone number and any other information you volunteer.

 

- Information I collect about you

I will use Google for understanding anonymised traffic to the site.

My website host won’t collect any data from you.

 

- Uses made of the information

I use the held information you provide and information I collect about you for carrying out my professional and contractual obligations during our working relationship.

 

This includes:

• Ensuring the terms found in the Treatment Agreement Contract are upheld by both parties.
• In Case of Emergency (ICE) contact numbers for where disclosure might be necessary – I will contact your GP or next of kin in these cases, with your knowledge and consent UNLESS it is a case of terrorism, human trafficking or money laundering, which by law I must report without the need for consent.
• Information I receive from other sources (Google stats, anonymised customer feedback submitted and any third party referrals) will be handled safely as noted in the points above.

The data collected will be kept in a password protected electronic system and discarded either when you withdraw your consent for use or once the retention period of 7 years for closed cases, as stated by my insurer, has ended.

 

Access to information

The current Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act.

 

Your rights

You have the right to opt-out of receiving marketing emails or surveys from me. I have added this clause in my contract. You can also let me know whether you want to change how I use your data

 

Your right to Access

You have the right to ask for a copy of your personal information, free of charge, in an electronic or paper format. You also have the right to ask me to amend or change any incorrect information about you.

 

Your right to be forgotten

You have the right to ask me to delete any information that I hold about you, including personal information that is no longer relevant to original purposes – for example when our therapeutic relationship has ended or if you wish to withdraw consent. In all cases and when considering such requests, these rights are obligatory unless it’s information that I have a legal obligation to retain.

 

- Data Portability

You have the right to receive your personal information as previously provided, and to transfer this information to another party.

---

If you follow a link from my websites to any other websites, please see their own privacy policies for your information and security.

I (Emma) built this site. I don’t hold any data in regards to cookies. I'm not currently doing anything fancy enough to require them, but if those change in the future I will update this page. Some of the facilities I include may use cookies, and where they do, I have mentioned these on the Digital Policy page.