My GDPR agreement sets out how any personal data I collect from you, or that you provide to me, will be stored and processed confidentially.
How I gather your personal information
- Information that you provide by emailing me via my website and via various therapy directories and platforms or by phone to request further information about my therapy service.
- Email at joey@thekindertherapist.com or phone 0208 152 7812.
- The pre-therapy questionnaire and booking form via Google Calendar, Google Forms and Stripe (payment platform).
- Session notes.
- Regarding online therapy, I use the platforms Google Meet and Microsoft Teams. All these platforms are securely encrypted.
Where I store your personal data
- Personal data that I collect from you via any form of contact by email or phone will be kept securely.
- The pre-therapy questionnaire form, your contact details, and session notes are stored on a computer and password protected.
- The session notes are anonymised, using your initials only and are password protected.
- I take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
Uses made of the information
- I use your contact details to allow me to provide you with information about the service that you request from me, to allow you to tell me about changes in your availability and to notify you about changes to my availability and any other relevant administrative changes.
- I use session notes to carry out my obligation arising from the agreement entered into between you and me (please read the client agreement for further information).
- As part of my commitment to providing a professional service, I attend clinical supervision regularly. This is bound by a confidentiality contract and to protect your identity I will only use the initials of your first name and surname.
How long I keep your information/notes for
- I will retain your pre-therapy questionnaire and session notes for as long as we are working together. After therapy has finished, I will retain these documents for a further five years in case you decide to return to therapy with me, and which is also a requirement of my indemnity insurance, and then after which the documents will be destroyed.
Your rights
- You are entitled to view the personal information that I hold. Any requests to access your personal data will have a month to be completed.
In the event of a data breach
- I have a legal obligation to report a data breach to you and the Information Commissioners Office (ICO) within 72 hours.
Disclosure of your personal information
- In the event of me experiencing severe illness, hospitalisation or death, your personal contact information will be disclosed to my two clinical executors of my Professional Will so that they can notify you. In the event of my death, my executors will also destroy all contact information and notes on my laptop/computer devices.
- If I am under a duty to disclose or share your personal data in order to comply with any legal obligation. For example, if I am subpoenaed to court, or as a legal requirement such as safeguarding children or vulnerable adults, terrorism or money laundering.
Changes to the GDPR agreement
- I will notify you of any changes I may make to this privacy policy in the future via email. It will also be the responsibility for any website user to check for new or updated service policies.
Consent to the GDPR agreement
- Your use and undertaking of the services constitutes your approval and acceptance of this agreement, and are consenting to my use, and storage of your personal information, you have disclosed to me, as detailed above. You have the right to withdraw your consent at any time.