Privacy Statement - General Data Protection Regulation (GDPR)

Last updated August 08th 2024

This Privacy Statement outlines how I collect, use, and store your personal data in accordance with the General Data Protection Regulation (GDPR). I am committed to ensuring that your privacy is protected at all times.

As a registered data controller with the Information Commissioner's Office (ICO), I adhere to the principles of lawful and transparent data processing. My ICO registration number is ZB732393, which can be verified at ico.org.uk/register.

Contact Details:

Jen’s Counselling, International House, Cray Avenue, Orpington, Kent, BR5 3RS.

Jenscounselling24@gmail.com

07479 303489

Data Collection and Storage

  • I collect only the personal information necessary for our work together in therapy. This includes your contact details and sessional notes.

  • Client notes are kept intentionally brief and non-descriptive. They are stored in a locked filing cabinet and retained for three months following the end of our work together. After this time, they are securely destroyed.

  • Any digital documents containing personal data are stored on a password-protected computer to which only I have access.

  • Your contact number is stored on my mobile phone under a coded name to ensure confidentiality. All texts and contact information are deleted three months after the end of therapy.

  • Electronic inquiries (e.g. emails or online contact forms) are deleted three months after receipt unless ongoing contact is established.

How I May Share Your Information

In line with the BACP Ethical Framework, I receive regular supervision with a qualified and experienced clinical supervisor. During supervision, I may share minimal client information (such as your first name, approximate age, and a brief overview of our work) to ensure ethical and safe practice. All discussions are anonymised and strictly confidential.

Emergencies: If there is a serious concern for your safety or the safety of others, I may be required to share relevant information with community services or the local Mental Health Crisis Team.

Your Rights

Under GDPR, you have the following rights:

  • To request a copy of the personal data I hold about you.

  • To request corrections to any inaccurate or incomplete data.

  • To request the erasure of your personal data when it is no longer necessary for the purposes for which it was collected, or where you withdraw consent.

  • To be informed about how your data is used, and to object to or restrict certain forms of data processing (except where I am required to retain information for legal or professional reasons).