Lisa Peplow Counselling General Data Protection Regulation Policy & Statement.

The General Data Protection Regulation (GDPR) is concerned with personal information that I collect, store and share.

GDPR for Clients

Personal Information I Collect and Store

  • Name, Age, Date of Birth, Address.
  • Telephone/SMS number (plus permission to send SMS & leave voicemail).
  • Email address.
  • Presenting Difficulties and Issues.
  • Brief Case Notes.

How I Store Your Personal Information

Electronic…

  • Contact name & telephone.
  • Assessment Record & Brief Session Notes – stored on a password protected and a password protected and encrypted back up disk.
  • Email/SMS

How I may Process/Share your Personal Information.

Legitimate Interests/Supervision

I have supervision monthly with a Clinical Supervisor qualified in this process. In order to protect your privacy, my Supervisor will not know you personally nor professionally. I will refer to you by your first name, and I may refer to your information verbally when it’s helpful to my professional processes.

Emergencies.

If your health is in jeopardy (provided I have your consent) I may share your contact information with a GP or an emergency healthcare service (e.g. Mental Health Crisis Team).

If I have become aware of your intent to cause harm to another person/organisation (e.g. terrorism or Child Protection & Safeguarding), the law may require that I inform an authority without seeking your permission. In such a situation, the law may require that I share your personal information without your knowledge.

Legal Obligation

I may have to share information with a court of law if I am issued with a court order

I keep anonymous clinical notes of each session in line with the requirements of my professional insurance.

This is also to keep records where processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.

I keep financial records for 7 years according to legal requirement.

Erasing your Information.

If you choose not to continue working with me after your initial session your information will be disposed of 2 weeks after as confidential waste.

If you do decide to continue, when we have finished working together, I will erase electronic copies of your personal information & correspondence within one month.

I will hold onto your case notes for up to seven years past the end of our working together.

This is so that I have a reference of our work in situations such as you returning to work with me in the future. After this time has passed, I will delete them.

Your Rights.

To see the information I hold about you, which has to be responded to within one month of the request.

To rectify any inaccurate or incomplete personal information.

To withdraw consent to me using your personal information.

To request your personal information be erased (though I can decline whilst the information is needed for my competent practice).