Under new GDPR regulations I am required by law to share with my clients the data that I hold on you.
These Include: emails, voicemail messages and texts between us and any written correspondence.
Other digital records include my online diary/calendar system and records of payment, invoices etc. All electronic information is stored securely and/or on password protected devices.
Our contract and any document which contains your personal details (contact numbers etc.) are also stored electronically. If I have to use paper copies, these will always be anonymised and a client number will be assigned to you.
I will not share any information with third parties unless you request this. We will discuss this if it arises.
If required, I may have to share some information for legal purposes. If this occurs, I will discuss this with you unless directed otherwise.
I may discuss our work with my clinical supervisor. I will only use your first/given name and no contact details or addresses will be shared in this context.
Period of Retention
Session notes and other documents will remain in an encrypted file and password protected for a period of five years from the end of our work and then permanently deleted.
As a Registered Data Controller, I subscribe to the Information Commissioner's Office regulations. This body sets rules and guidelines regarding data protection and handling. My Registration number is ZA318034