My contact details:
Name: Kirsty Stevens Counselling
Address:
Phone Number:
E-mail: Kirstystevenscounselling@protonmail.com
The type of personal information I collect:
I currently collect and process the following information:
⦁ Personal identifiers, contacts and characteristics (for example, name and contact details)
⦁ GP name and contact details
⦁ Emergency contact details
How I get the personal information and why I have it:
Most of the personal information I process is provided to me directly by you for requesting of more information about the services I offer or to arrange counselling sessions.
I use the information that you have given me in order to contact you to arrange an introduction session, a counselling session, or to advise you of any amendment or changes to our agreed sessions.
I do not share your information with anyone except in an emergency in line with our counselling agreement (contract) or when I have your permission to do so. You can change your mind at any time unless there is a legal or ethical (safeguarding) reason share your information in line with our counselling agreement (contract).
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases I rely on for processing this information are:
⦁ Your consent. You are able to remove your consent at any time. You can do this by contacting me on the above details.
How I store your personal information:
⦁ Your information is securely stored in a double password protected folder on my computer system. Any paper notes are filed away in a lock cabinet with your client reference number on. Any personal details are locked away separately.
⦁ I keep any personal information for 7 years inline with my insurance and BACP good practice guidelines. After this time, they will be destroyed.
⦁ In the case of clients under the age of 18, personal details will be kept for 7 years after they turn 18 and then destroyed.
Security:
I will take all reasonable precautions to prevent the loss, misuse or alteration of information you give us.
Communications in connection with this service may be sent by email. For ease of use and compatibility, communications will not be sent in an encrypted form unless you require it and give Me/Us permission to communicate with you in that way. Email, unless encrypted, is not a fully secure means of communication. Whilst I endeavour to keep our systems and communications protected against viruses and other harmful effects, we cannot bear responsibility for all communications being virus-free.
Your data protection rights:
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that I transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.
You can request this information from the above contact details.
How to complain
If you have any concerns about my use of your personal information, you can make a complaint to me directly using the above contact details.
You can also complain to the ICO if you are unhappy with how I have used your data.
My ICO reference number is:
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
By signing this you are agreeing for me to keep a record of your personal data under the requirements of the General Data Protection Regulation (GDPR) 2018.
Signed:…………………………………………………………………………………… Client
Date: ……………………………………………………………………………………….
The information in this privacy policy is accurate as of 1st August 2023. Any amendments to this policy will be brought to your attention.