Name: Francesca Smith
ICO registration number: ZA336984
Address: St. George’s Works, 51 Colegate, Norwich, NR3 1DD
Phone Number: 07810 556410
The type of personal information I collect
When you contact me with an enquiry about psychological therapy services, I will collect information to help me satisfy your enquiry. I currently collect and process the following information:
- Brief information on difficulties that you are seeking therapy for.
- Contact details (email address and telephone number)
- Data concerning health (limited to what is necessary for treatment).
- Online identifiers. I collect cookie identifiers, or others such as the ones used for analytics and marketing; devices; tools and protocols, such as IP (Internet Protocol) addresses; device's geolocation; and other similar data.
How I get the personal information and why I have it
Most of the personal information I process is provided to me directly by you for one of the following reasons:
- You are enquiring about treatment
- You are currently receiving treatment from me
- You have filled out the therapy agreement and corresponding questionnaire
I also receive personal information indirectly, from the following sources in the following scenarios:
- Your GP or other health professional may send me your personal information when making a referral.
- A parent or trusted individual may provide your personal information to me when making an enquiry on your behalf.
How I use your information
I use the information that you have given me in order to:
- Contact you in relation to your treatment enquiry
- Provide treatment as agreed with you
Rest assured that everything you discuss with me is confidential other than in the conditions below:
- If I believe that you are at risk of harm to or from myself or others
- If required to do so by a UK Court of law – For example, in the case of a disclosure concerning acts of terrorism, vulnerable adult or child protection issues or drug trafficking, confidentiality will be breached and such disclosures will be passed onto the relevant authority without delay.
Due consideration should be exercised before disclosing anything of a previously unreported criminal nature, as I am obligated to contact relevant authorities. I will always try to speak to you about this first, unless there are safeguarding issues that prevent this.
Under the General Data Protection Regulation (GDPR), the lawful bases I rely on for processing this information are:
- Your consent. You are able to remove your consent at any time. You can do this by contacting me at email@example.com
- I have a legitimate interest.
- Legal obligations.
How I store your personal information
Your information is securely stored on encrypted devices with up to date antivirus and passwords known only to me. Emails attachments including personal information are encrypted, with passwords known only to us.
All personal information provided to me will be securely destroyed from my systems after 7 days if you decide not to go through with treatment.
Once treatment has ended, your information will be securely destroyed after 7 years.
I will only retain your personal information for as long as necessary to fulfil the purposes I collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask me for copies of your personal information.
Your right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
Your right to erasure - You have the right to ask me to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask me to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.
Please contact me at firstname.lastname@example.org if you wish to make a request.
How to complain
If you have any concerns about my use of your personal information, you can make a complaint to me at: email@example.com.
You can also complain to the ICO if you are unhappy with how I have used your data.
The ICO’s address:
- Information Commissioner’s Office
- Wycliffe House
- Water Lane
- SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk