Privacy Policy

Data Collection & Processing

The data I collect

• Name
• Date of birth
• Address
• Telephone number
• Email address
• Occupation
• GP Details
• Medical conditions
• Medications
• Family configuration and history
• Therapy history
• Client expectation from therapy
• Referrer information

How the data is collected

You directly provide me with most of the data I collect upon session agreement. I collect data and process data when you:

• Attend your first session
• Email, call or text to set up an appointment
• Send messages via any social media platform

I may also receive your data indirectly if you are referred to me by:

• Employee Assistance Programme
• Private medical insurer (e.g. BUPA, AXA, AVIVA, CIGNA )
• Your GP

How the data is used

My main purpose for data collection is to provide therapy services to you. In addition to this I will use your data for the purposes of contacting you to arrange or rearrange sessions, to submit an invoice or request payment, to provide an update on any information regarding my services, or to provide any other information that I might have agreed to supply you with.

Lawful Basis

Data protection regulations require a lawful basis for all processing activities. For my purposes these are:

Legitimate Interests

• In order to handle referrals where your data is provided to me by third parties, I need to process your data. This is only used to manage your referral, and should you choose not to attend therapy with me, your data will be deleted.

Contract

• To deliver the therapy that you have requested or been referred to me for, I need to process your personal data, and we will enter into an agreement at our first meeting.
• Given that the nature of this personal data is directly involving your physical and mental health it is further classified as special category data and therefore requires an Article 9 exemption, which for the delivery of direct health care is (h) Health or social care.

Legal Requirement

• The professional bodies that regulate my work and my insurers require that I maintain records of treatment, which have a fixed retention period.

Vital Interests

• If I believe someone is at serious risk, I may contact an appropriate organisation for help.
• The law states that money laundering, drug/human trafficking and acts of terrorism must be reported to the police.

Please note that although I request your verbal consent for treatment, I do not rely on this as a basis for processing your personal data.

Data storage

• Personal data – all electronic personal data is stored securely using approved third-party services and encryption where appropriate.
• Session data – I will keep a record of sessions, in accordance with the General Data Protection Regulation ((EU) 2016/679) (GDPR)) and the Data Protection Act (2018).  It will be held for six years following the end of therapy, after which time it will be destroyed.

Data sharing

I will keep the content of our sessions confidential but there are the following exceptions:

• I have supervision sessions, where I discuss clients with another therapist to ensure that I am working in the best way.
• If I believe you or someone else is at serious risk of harm, I may contact appropriate people for help.
• The law states that money laundering, drug/human trafficking and acts of terrorism must be reported to the police.
• A court order can force me to disclose information I hold about you.
• The funder of your therapy may request information about you and the work we are doing together.

Your data protection rights

I would like to make sure you are fully aware of all of your data protection rights. Every person is entitled to the following:

• The right to access – you have the right to request copies of your personal data.
• The right to rectification – you have the right to request that I correct any information you believe is inaccurate. You also have the right to request that I complete information you believe is incomplete.
• The right to erasure – you have the right to request that I erase your personal data, under certain conditions.
• The right to restrict processing – you have the right to request that I restrict the processing of your personal data, under certain conditions.
• The right to object to processing – you have the right to object to my processing of your personal data, under certain conditions.
• The right to data portability – you have the right to request that I transfer the data that I have collected to another organisation, or directly to you, under certain conditions.

If you make a request, I have one month to respond to you. If you would like to exercise any of these rights, please contact me via:

Email: info@victoriaamoore.co.uk

Call: 01732 369067 / 07919 077519

Cookies

About cookies

For information about cookies, including what they are, what they do and how to control them please visit www.allaboutcookies.org

Cookies used by my site

Changes to my privacy policy

I regularly review my privacy policy and will update this page with any changes. This privacy policy was last updated on 21^st Feb 2020.

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that I have not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office.

https://ico.org.uk/