Privacy

Privacy Policy

I see privacy as extremely important and am committed to protecting your personal data.  

The below policy describes the information I collect in order to provide my services to you. This information includes personal information as defined in the General Data Protection Regulation (GDPR) 2018.

Who keeps my data?

I (Dr Anna Lose) am the data controller. I am responsible for data held.

What personal data is processed?

  • Basic contact information such as name, date of birth, address, contact number, email, next of kin name and phone number, GP contact details, and (where appropriate) health insurance policy number and authorisation for psychological treatment.
  • Sensitive personal data, including a therapy agreement and my therapy records (clinical notes, letters, reports and/or outcome measures). 

Reasons for keeping your personal data

In order to provide you with an effective and safe psychological therapy, supervision, or consultation service, I have a legitimate interest in keeping and using your personal data. I only use your personal data to provide you with the services requested and to process payments for these services.

I will never pass on your information to anyone without your consent.  

How long will you store my personal information?

Your personal information is only stored for as long as it is required to fulfil the purposes it is collected for and to satisfy legal requirements. In line with professional guidelines and legal requirements, all records are kept securely for 7 years after treatment ends or for children, for 7 years from the date they turn 18. All personal information will be deleted or securely destroyed at the appropriate time, without storing it for longer than is required.  

If any of your information changes throughout the duration of therapy, I would ask you to let me know of the update. This is so that I can make sure the information I have about you is up to date and accurate, in order to make sure I can provide you with the best service possible.

Who the personal information may be shared with?

The only times when your personal information may be shared with third parties are:

  • If you are claiming through a health insurance policy to fund therapy, then your appointment dates will be shared with that organisation for the purposes of billing. Information may also be shared with your insurer to provide treatment updates in order to extend your treatment entitlement.
  • In cases where treatment has been instructed by a solicitor, relevant clinical information from therapy records will be shared with legal services as required and with your written consent.
  • When there is a legal requirement to do so, such as when a disclosure is in the public interest, to prevent a miscarriage of justice or where there is a legal duty, for example, a Court Order.
  • When there is a concern about safety or risk of serious harm to you or someone else. Where possible, I will always try to discuss such a proposed disclosure with you, unless doing so could increase the risk to you or to someone else.
  • When you have given consent for the information to be shared, for example, reports or treatment summaries to other health care professionals or school staff involved in your/your child’s care.
  • As part of professional practise and to ensure best practice all clinical psychologists receive supervision from a clinical psychologist. During supervision, some of the details about you will be discussed but you will not be identified by name.

How is the data stored?

Your data is predominantly kept in a secure password protected computer, and within my secure email system. 

Paper notes are stored in a locked filing system and shredded once used.

All devices are password protected and encrypted. Malware and antivirus protection is installed on all computing devices.  

Information from telephone enquiries is kept for 3 months and then destroyed if the individual does not go on to have therapy with me.

Rights to information stored

  • You have a right to access your personal information.
  • This will usually be shared with you within 30 days of receiving a request.
  • There may be an admin fee for supplying the information to you.
  • Further evidence may be required from you to verify your identity.
  • If you have concerns that your data is being handled unlawfully, you can contact the Information Commissioners Office (ICO).
  • Subject Access Requests should be made by email to anna@psychologykey.co.uk .

If you require further information on privacy or data protection in relation to your therapy with me, please do not hesitate to get in touch. Alternatively, if additional information is required, you can access it on Information Commissioner’s Office (ICO) https://ico.org.uk.

Dr Anna Lose

Clinical Psychologist