I respect my clients' privacy and I take the protection of personal information seriously. As a Consultant Clinical Psychologist I hold a great deal of sensitive information in the course of my work, and I treat that responsibility with the care it deserves. This page explains how I collect, use, store and protect your information, and the rights you have over it. I am registered with the Information Commissioner's Office (ICO) and I work in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Confidentiality

Everything you share with me is treated as confidential. What is discussed in our sessions stays between us, and I will not disclose that you are seeing me, or anything about our work together, to anyone else without your consent. I keep my clinical notes secure. I keep all your information confidential. It is only in the exceptional circumstances where I am concerned about harm to yourself or someone else, where your information may be shared. Wherever it is possible and safe to do so, I will discuss this with you first, and I will only share what is strictly necessary.

As a Clinical Psychologist I receive regular clinical supervision, as is necessitated by my regulatory body  and as this is an important part of good practice. I may discuss aspects of our work in supervision, but I do so in a way that protects your identity, and my supervisor is bound by the same duties of confidentiality that I am.

What information I collect

I collect only the information I need in order to work with you safely and effectively. This usually includes your name and contact details, your date of birth, your GP details and next of kin. I make clinical notes during our sessions  together and store these securely. Where you are funded through private health insurance, I will also hold details relevant to your policy, such as your authorisation code and membership number.

How I use your information

I use your information to provide and manage your psychological care, to keep accurate and appropriate clinical records, to communicate with you about appointments and your treatment, and, where relevant, to liaise with your GP, your insurer or another professional involved in your care — always with your knowledge. The lawful bases on which I process your information are the provision of health care under the UK GDPR, and your consent. Because health information is a special category of data, I hold and process it under the additional conditions that apply to the provision of health and social care.

How I store and protect your information

I store your information securely, whether it is held on paper or electronically, and I take appropriate technical and organisational measures to keep it safe from loss, misuse or unauthorised access. Any electronic records are held on password-protected and encrypted devices and systems. I retain clinical records for seven years as advised by my regulatory body , after which they are securely destroyed.

Your rights

Under data protection law you have the right to ask to see the information I hold about you, to ask me to correct anything that is inaccurate, and in certain circumstances to ask me to restrict or erase it. You can also withdraw your consent to my processing your information at any time, though please be aware that this may affect my ability to continue working with you. If you would like to exercise any of these rights, please contact me and I will respond within the timescales the law requires.

Questions and concerns

If you have any questions about how I handle your information, or if you are unhappy with anything I have done, please do raise it with me directly in the first instance to give me the opportunity to address your concerns and reflect on my practice.You also have the right to complain to my regulatory body the HCPC (link) and the Information Commissioner's Office, the UK regulator for data protection, at ico.org.uk.

If you would like to see my full Terms and Conditions, please contact me.