During the course of our work together, it will be necessary for you to share with me personal data, such as contact details and, occasionally, sensitive information regarding your personal history.
The purpose of this privacy statement is to tell you how this data is processed, stored and disposed of and with whom it might be shared. The processing of this information complies with UK Data Protection Legislation. I am Sheila Field and the Data Controller in my Counselling and Psychotherapy Practice. I am responsible for processing the information you provide and protecting your privacy.
What data is collected and for what purpose?
This is information, including contact details, needed to provide psychotherapy and counselling. I process all data on the basis of data minimisation, which means only the information necessary for providing my service is collected, processed and retained.
Where is data stored?
Every effort is made to ensure that data is kept secure and confidential. I keep brief hand-written notes and anonymous clinical notes of each session to support our work together. These notes are stored and kept securely in a locked cabinet, with any identifiable material stored separately and securely and any electronic data is password protected.
How long is data kept?
In accordance with professional, legal and insurance requirements, data is stored for a period of seven years from the end of our work together, unless agreed otherwise. At the end of this period, it is disposed of as confidential waste and is shredded.
Is data shared?
All data is kept securely and what is share in sessions is bound by confidentiality.
These are the exceptions:
Clinical Supervision: To comply with professional regulations, I attend regular clinical supervision to maintain standards of my practice. Supervision is bound by strict confidentiality and all identities are consistently protected.
Incapacity: In the event of my being unexpectedly incapacitated by accident, illness or death, your contact details will be accessed by my professional executor who will contact you and, if necessary, arrange for confidential disposal of data, when there is no longer a legal requirement to retain it.
Fitness to practise and risk: If these issues arose, we would address concerns as described in information provided.
The Law: I am required to disclose cases of money laundering, terrorism and trafficking. Courts hold the rule of confidentiality as paramount, but in rare cases they have powers to subpoena clinical notes.
Your data and your consent:
You are entitled to access the data I hold and to correct misinformation. You may withdraw your consent for the data to be retained at any time by notifying me in writing, duly signed and dated. However, it is important for you to know that I am obliged to retain data for legal purposes (see above.)
Complaints: If you wish to complain about how I hold your data in any way, then, in the first instance, please contact Sheila Field, who is the data controller of business Sheila Field Therapy, New Oriel Hall, Brookleaze Buildings, Bath BA1 6RA. If you have any further concern which has not been addressed then you should contact Information Commissioner's Office at https://ico.org/concerns/handling or 0303 123 1113.
Breaches: I will report any data breach to the Independent Commissioner, to United Kingdom of counselling and Psychotherapy (UKCP) and to you within 72 hours, if it becomes apparent that any data has been stolen.