Under UK GDPR regulations I am required by law to share with you what data I hold for you, how I handle and/or process this and how long I keep it for.
Use of Zoom
Use of this platform ensures more security due to password protection for meetings and a waiting room that can only be accessed by the host and the invited party at the agreed appointment time. I make every effort to ensure confidentiality in person and online, and comply with the ethical guidelines of the UKCP and BACP, and UK General Data Protection Regulation (GDPR). I am registered with the Information Commissioners Office (ICO). Please also see Zoom's information on GDPR practices, privacy, and data protection.
After the Zoom session is finished and closed it cannot be accessed again until the next scheduled meeting. I will set up a recurring meeting so that you can use the same link/meeting details each time you join. Past calls and client details are not visible on Zoom once a meeting has taken place.
Digital records
These Include: emails; that we may send to each other regarding appointments or any between session contact. This may also include voicemails, and any text messages should either of us be unable to attend a planned session. Other digital records include; records of payment made via bank transfer. All the above is stored securely and/or on password protected devices or portals.
Paperwork
I maintain an attendance record of when we meet, a contract for the work we are doing together; this includes your name, signature, objectives of work together/ reason for coming to therapy etc. Contact sheet with your full name, phone numbers, email address, emergency contact and GP details (including this document). All of this is kept in a locked filing cabinet.
How I use it and sharing info
I will not share any of the above information with third parties (unless you ask me to), in which case we will discuss the benefit of this. If the information I hold for you is court ordered, I will have no choice but to share this. However, I will endeavour where possible to inform you prior to this action being taken.
I do not collect personal data for any marketing, or market research.
Clinical supervision: the information shared will not include data such as surname, address, emergency contact, phone numbers, email address. The only information shared will be your first name, the city that you live in, your background, why you came to therapy and the nature of our work together. This process is to ensure high standards are met for you and clinical supervisors are bound by confidentiality and cannot share the information that is shared with them about you. Further training and research; information used will not include any information that makes you directly and/or explicitly identifiable, maintaining my commitment to client anonymity.
How long I Keep your information.
I hold your personal details and records whilst you are attending as a client. On completion of the work, I will keep all records for 7 years as per BACP and UKCP regulations. After this time, all records and paper notes will be destroyed.
