GDPR
Last updated: May 22 2018
A certain amount of personal data is collected at the time of booking. This is for the purposes of working safely and ethically in line with the BACP* and GDPR**.
All information gathered either on paper or online is treated as confidential.  The only time your information will be disclosed with a third party would be in most cases with your permission. 
The reason that confidentiality might need to be broken would be in the event of one of the following criteria having come up: immediate risk of substantial harm to self or others; or under a legal requirement, e.g. terrorism, drug money laundering; or via court order for disclosure.
Client notes and contact details will be kept for 6 years.
Client rights under data protection law:
to access a copy and explanation of their personal data
to request correction or erasure, in certain circumstances
to request limiting or ceasing data processing, where applicable
to compensation for substantial damage or distress caused by data processing, where applicable
You may update or change your contact details at any time by e-mailing me at lynne.mcneil@ntlworld.com
 
* https://www.bacp.co.uk/bacp-journals/bacp-workplace/january-2018/an-upgrade-for-data-privacy/
** https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/

______________________________________________________________________________

PRIVACY POLICY
I take the privacy rights of my clients very seriously.  This privacy policy sets out how I deal with your ‘personal information’, that is, information that could identify, or is related to the identity of, an individual.
What personal informationdo I collect?
In order to treat you, I will ask you to provide certain information.  This includes: Name, Gender, Date of birth, Home address, Email address, and telephone number and your Doctors details.
How do I collect this personal information?
All the information collected is obtained directly from you.  This is usually at the point of your initial consultation. At the point at which you provide your personal information, I will also request that you provide consent for me to store and use your data.  Your consent is required in order to ensure my compliance with data protection legislation.  Subsequently, I will add to this initial information with details of the consultations you hold with me.
How do use this personal information?
Your personal information is confidential except under the following circumstances:immediate risk of substantial harm to self or others; child abuse issues or under a legal requirement, e.g. terrorism, drug money laundering; or via court order for disclosure.
If I am concerned about something you have mentioned in a session I will discuss my concerns with you. If it is necessary I will request that I contact your Doctor or relevant service (police, mental health team, social services, etc.). This is usually done with your permission but in certain circumstances this may not be possible. 
I will communicate with you by email, other digital methods, by telephone and by post.
With whom do I share your personal information?
In order to work safely and ethically I attend regular supervision session to discuss my work.  You will only be referred to by your first name and no contact details will be shared with my supervisor. 
How long do I keep your personal information?
I need to keep your information for as long as you continue to attend counselling sessions with me.  Since clients may return for more sessions at a future date, I will keep your information for six years after your last session.  At that point, your file will be securely destroyed and any digital information will be erased from my computer systems.
How your information can be updated or corrected
To ensure that I have accurate and up-to-date information, you need to inform me of any changes you believe I should make to the personal information I hold.  You can do this by contacting me by any of the methods previously described.
Under data protection legislation, you have the right to inspect the personal information I hold about you.  You can make a request to do so by contacting me and I will endeavour to respond within 14 working days.
How do I store your personal information?
My patient files are paper-based and are held securely within my consulting room.  I take steps to protect your personal information against loss or theft, as well as unauthorised access, disclosure, copying, use, or modification.
 Your email address, if your have one, is held securely on the servers of my email providers, currently Virgin Media.
Changes to this policy
This policy may change from time to time. If I make any material changes, I will make you aware of them.
Contact
If you have any queries about this policy, need it in an alternative format, or have any complaints about my privacy practices, please contact me at lynne.mcneil@ntlworld.com
Policy review date: Every 2 years, e.g. May 2020