The Data Protection Act 2018 (DPA) defines personal information as any information that can be used to identify a living individual. Individuals can be identified by various means including their name, address, telephone number or email address for example.
I need to process some of your personal information in order to fulfil my contractual obligations to you as a therapist, for example to assess whether I am able to offer you therapy and then to deliver effective counselling to you if therapy commences. Your personal information helps guide both my assessment process, and my clinical decision-making during therapy.
I will collect your personal information in the following ways: via my website: www.avalyjonestherapy.com, over the telephone, in writing, and in person during our sessions. I will treat your personal information in a way that is compliant with the DPA.
I will store your personal information both electronically and physically. Personal information is stored electronically on a device that is password and/or fingerprint I.D. protected, and in files that are further password protected and only accessible by me. Names and contact details are stored separately to other personal information (anonymised format). Information is stored physically using paper records held securely in locked storage in an anonymised format. These records are also only accessible by me.
According to the General Data Protection Regulation (GDPR), your personal information should be stored for no longer than is necessary. In practical terms, I will store your information for a maximum of 7 years following the ending of therapy.
Some of your personal information may be shared with other professionals such as your G.P or the police under certain exceptional circumstances. These include situations where there is threat of serious physical harm to you or to others.