
GDPR
GDPR sets out the main principles of data protection and the responsibilities organisations have when handling personal data. It protects individuals’ personal information and improves their control over how it is collected, stored, shared, and used.
- Right to be informed- I will ask you to provide your name, basic contact information, the contact information for your GP and the reason for your referral. This information will help me to contact you to schedule and confirm sessions or send invoices to you for services. Having the details of your GP is part of my suicide disclosure policy which states that I will make your GP aware of any serious intent you may have to take your own life. At the end of every session, I make notes of what was discussed in the session. These notes are anonymised and are for clinical review only. They are stored on a password protected laptop. Once we finish our sessions, these notes will be digitally archived for five years, after which time they will be deleted. Any printed contact information will be destroyed and disposed of as confidential waste.
- Right of Access- You have the right to request copies of any information concerning you. Requests for information must be submitted in writing (not be email) and be signed by the individual. Individuals under the age of 18 must provide their own consent and have the consent of a parent, legal guardian, or social worker. After the request has been submitted, copies of the requested information marked confidential will be posted to the address on file within 48 hours of receipt of the request.
- Right of erasure- You have the right to request that any information concerning you be permanently deleted or destroyed at any time. Requests for information to be deleted or destroyed must be submitted in writing (not be email) and be signed by the individual. Individuals under the age of 18 must provide their own consent and have the consent of a parent, legal guardian, or social worker. After the request has been submitted, you will receive a letter stating that the materials have been confidentially disposed of within 7 business days of the request being made.
- Right to restrict processing- You have the right to decide how I use your data. The data I collect is not given to others under any conditions without your consent. I use your contact details to contact you only and anonymised notes are used for my records on what was discussed in the session. These are not publicly published anywhere. The only time I may need to share my notes is if they are requested by the police in a criminal investigation. If this should happen you will be made fully aware of my intentions and still have the right to request a court order for the acquisition of information by the police.
- Right to data portability-You have the right to request copies of and use your data the way you wish to. Requests for information must be submitted in writing (not be email) and be signed by the individual. Individuals under the age of 18 must provide their own consent and have the consent of a parent, legal guardian, or social worker. After the request has been submitted, copies of the requested information will be posted to the address on file and marked confidential within 48 hours of receipt of the request.
- Right to object- You have the right to object to the use of your data for any purpose. This means that you can provide as much or as little information as you like and to object to its use for certain purposes.
- Right related to automated decision-making including profiling- You have the right to equal opportunity access to services. This right pertains to the way I use data to make decisions about you. When choosing what clients I decide to work with and who I decide to signpost to other services, I do not consider factors such as race, gender, sexual orientation, race, or religion to name a few. I prefer to focus on whether the services I offer are appropriate to fit your needs.