The General Data Protection Regulation (GDPR) is concerned with personal information that I collect, store and share.
PERSONAL INFORMATION I COLLECT.
· Gender (or preferred identity)
· Age /Date of Birth
· Relationship & Progeny
· Telephone/SMS number (plus permission to send SMS& leave voice message
· Email address
· Counselling History
· Medical conditions relevant to counselling
· Prescribed Medication
· Session Summary
HOW I STORE YOUR PERSONAL INFORMATION.
Written notes which will include a contact sheet, assessment notes, Contract/Agreement,
Brief Session Notes and GDPR agreement
Your email address and correspondence will be stored in my email account (currently Gmail) by nature of you contacting me. Your telephone number may be stored in my SMS or WhatsApp app should we exchange messages in this way. Electronic correspondence will also be held by the corresponding app (Gmail, Phone’s SMS, WhatsApp).
3. Website: none of your personal information is stored on my website, other than to momentarily collect and send it to my Gmail account for the purposes of our initial contact. e.g. Contact name and telephone number and Email/SMS/WhatsApp.
4. Smartphone. Emails stored in Gmail account (encrypted)
HOW I MAY PROCESS/SHARE YOUR PERSONAL INFORMATION.
I am required by the BACP Ethical Code to seek supervision for my work for at least 1 ½ hours per month. This is the only consultation that takes place where I may share information about you so that I can take professional advice regarding my work with you. I do not use identifying information when I discuss you in supervision. My supervisor is also bound by the GDPR ethics and confidentiality
Setting up a Therapeutic Will is now mandatory under the BAPC Ethical Framework new guidelines. Your name and contact details will only be shared with my Therapeutic Executor on the event of my unexpected death or illness. Instructions are left with a member of my family to contact my Therapeutic Executor in these circumstances. Your details will be held in a locked filing cabinet which will only be accessible to the Therapeutic Executor upon the aforementioned events. The Therapeutic Executor has agreed to contact you and to either advise you of my expected return to work or to help you find another therapist if that is necessary. The intention is to minimise any distress that my sudden unavailability may cause you and to help you find an alternative counsellor if necessary.
CONFIDENTIALITY AND EMERGENCIES.
There is no change in my policy regarding confidentiality. However, I would need your consent to share your contact information with an emergency healthcare service if I considered that your health was in jeopardy.
ERASING YOUR INFORMATION.
When we have finished working together, I will erase any electronic information and correspondence about you within 1 month.
I will hold onto written records for up to 7 years as required by BACP and this complies with my Professional Indemnity Insurance in the event of any legal action.
You have the right to be informed and see what information I hold about you, to rectify any inaccurate or incomplete personal information or to withdraw consent to me using your personal information and to request that I delete your personal information ,which is not an automatic right, (although I can decline if I need to comply with the criteria of my Professional Indemnity Insurance and the BACP, my governing body).
Quite a number of my clients are now paying me using BACS and I need to point out to you that there is a record of your name and account details within those servers. However, these companies are also required by law to be GDPR compliant.
I am also happy to be paid by cash or cheque.
This document is to be signed and dated by both the client and the counsellor to confirm their agreement:
To agree that Maisie Holland may hold the following data about the client:
Postal and email address, telephone number(s), paperwork including confirmation letters and emails, sessions notes, text messages, GP name and address.