Privacy Statement - General Data Protection Regulation (GDPR)
Last updated August 08th 2024
This Privacy Statement outlines how I collect, use, and store your personal data in accordance with the General Data Protection Regulation (GDPR). I am committed to ensuring that your privacy is protected at all times.
As a registered data controller with the Information Commissioner's Office (ICO), I adhere to the principles of lawful and transparent data processing. My ICO registration number is ZB732393, which can be verified at ico.org.uk/register.
Contact Details:
Jen’s Counselling, International House, Cray Avenue, Orpington, Kent, BR5 3RS.
Jenscounselling24@gmail.com
07479 303489
Data Collection and Storage
I collect only the personal information necessary for our work together in therapy. This includes your contact details and sessional notes.
Client notes are kept intentionally brief and non-descriptive. They are stored in a locked filing cabinet and retained for three months following the end of our work together. After this time, they are securely destroyed.
Any digital documents containing personal data are stored on a password-protected computer to which only I have access.
Your contact number is stored on my mobile phone under a coded name to ensure confidentiality. All texts and contact information are deleted three months after the end of therapy.
Electronic inquiries (e.g. emails or online contact forms) are deleted three months after receipt unless ongoing contact is established.
How I May Share Your Information
In line with the BACP Ethical Framework, I receive regular supervision with a qualified and experienced clinical supervisor. During supervision, I may share minimal client information (such as your first name, approximate age, and a brief overview of our work) to ensure ethical and safe practice. All discussions are anonymised and strictly confidential.
Emergencies: If there is a serious concern for your safety or the safety of others, I may be required to share relevant information with community services or the local Mental Health Crisis Team.
Your Rights
Under GDPR, you have the following rights:
To request a copy of the personal data I hold about you.
To request corrections to any inaccurate or incomplete data.
To request the erasure of your personal data when it is no longer necessary for the purposes for which it was collected, or where you withdraw consent.
To be informed about how your data is used, and to object to or restrict certain forms of data processing (except where I am required to retain information for legal or professional reasons).