GDPR Policy

---

Introduction

The General Data Protection Rules (GDPR) mean that we need to be sure that you definitely want to hear from me and that you consent to me, Sally Moore at Sally Moore Psychotherapy, retaining your personal data.

What personal data do I collect?

I collect your: name, address, contact details and those of an emergency contact or next of kin, date of birth, and any medication that you are taking that may affect you or need to be disclosed to a health professional in a medical emergency.

How do I use your personal data?

I will only use your data for the purposes of delivering my services. I will retain and use client information to contact you and for in case of emergency, while you are in therapy with me. I will not use your personal data to contact you for marketing purposes.

How will I store your personal data?

I use a secure online system, that is specifically designed for Psychotherapists and other health professionals. All information stored within the system is encrypted and access protected and restricted. This ensures that your records are only accessible to me.

Will I share your personal data?

I will not sell your personal data to third parties. There are limited reasons for sharing your information: 

Legitimate interest - It may become necessary for me to break confidentiality for safeguarding reasons such as if there is threat of serious harm to you or others, acts of terrorism or drug trafficking/money laundering. Any information shared under these circumstances will be the minimum required. I may share your information with emergency services and / or health professionals where appropriate.

In the event of my incapacity or death - I have arranged for a qualified and experienced Psychotherapist to access your records to contact you and discuss therapy options, to maintain your safety. This is ethical practice to protect you, the clients, and is known as a ‘professional will service’. They also operate a confidentiality system, which fulfills GDPR requirements. Legal obligation - I may be obligated to share information in your notes if I am issued with a court order I will record and retain all notes from any sessions, in line with the requirements of my professional insurance and the limitation act: Special category data 9 (f) processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in the judicial capacity. 

Consent - If you ask me to share your notes/information with other medical professionals or your legal representative.

How long will I keep your information?

I keep client notes for 5 years after your final appointment, as required by my professional insurance. 

Your rights under GDPR:

1) Right to be informed. 2) Right to access – you can submit a subject request to see information that I hold on you. 3) Right of rectification. 4) Right to erasure – not applicable to lawful reason/legal obligation. 5) Right to restrict processing 6) Right to data portability – not applicable to lawful reason/legal obligation/legitimate interest. 7) Right to object – not applicable to lawful reason/legal obligation

Further information about your rights can be found on the Information Commissioner’s Office website.  If you have any queries or concerns about how I use your data, please approach me in the first instance if you feel able to: contact@sallymoorepsychotherapy.co.uk. You have the right to complain to the ICO: https://ico.org.uk/