Privacy policy summary
Effective From: 1st July 2022
- Purpose
- If you wish to read the full policy, please click on the button below to access it.
- The purpose of this summary is to help you understand how E-J Psychotherapy gathers, processes, stores & protects your data.
- Type of personal information collected
- E-J Psychotherapy collects the following type of information; personal identifiers, contact details and characteristics. This includes sensitive personal information and includes, but is not limited to,
- Information about your health, conditions & medication, your GP’s details.
- Your contact information and those of trusted individuals who may make contact or referrals on your behalf
- Information about your characteristics such as ethnicity, nationality, political, religious and philosophical beliefs and opinions, political and trade union affiliation and information pertaining to your sex life, sexual orientation and identity
- How E-J Psychotherapy obtains personal information and why it is required
- Most of the personal information E-J Psychotherapy processes is provided directly by you so that you can access psychotherapy & counselling and so that E-J Psychotherapy and it s therapists can comply with legal and professional obligations. There are some circumstances where some of your personal information may be provided to us by a trusted individual ie your GP or another health care provider, trusted friend/family member, if they are starting the referral process on your behalf.
- How E-J Psychotherapy stores your information
- Your information is securely stored in E-J Psychotherapy’s CMS (clinical management system). This uses a 2- step authentication process for added security and meets the UK GDPR requirements. Any electronic documented data that is not uploaded to E-J Psychotherapy’s CMS is stored securely, password protected and on password protected devices.
- Prior to starting therapy, when you make an enquiry (or one is made on your behalf), E-J Psychotherapy will keep information gathered during the referral process for 3 months after the date of last contact. Once you start therapy, E-J Psychotherapy will keep clinical records for 7 years after therapy ends. Your information will be disposed of by electronic deletion from E-J Psychotherapy’s CMS.
- Why E-J Psychotherapy shares your information
- E-J Psychotherapy may share some of your personal information with third parties for management, business administration and accounting purposes. This would include, but is not limited to, CMS (clinical management system) providers, accounting providers and HMRC.
- E-J Psychotherapy may also share your information with other health providers such as your GP, other mental health service providers or emergency services. This would typically be something that would be discussed with you and would be for safeguarding reasons, to ensure continuity of clinical care & responsibility and/or to ensure that you are receiving joined up support and care.
- Lawful basis for processing your data
- Under the UK General Data Protection Regulation (UK GDPR), the lawful bases E-J Psychotherapy relies on for processing your information are your consent and that E-J Psychotherapy has a legitimate interest.
- Your data protection rights
- Under data protection law, you have rights, including the right to access, rectification and erasure. Whilst you are not required to pay any charge for the exercising of your rights you will be charged a £15 administration fee for every SAR (subject access request) you make. If you exercise any of these rights, E-J Psychotherapy has a month to respond to you. Please contact us at admin@ejpsychotherapy.co.uk if you wish to make a request.
- How to complain
- If you have any concerns about how E-J Psychotherapy uses your personal information, you can make a complaint to E-J Psychotherapy at admin@ejpsychotherapy.co.uk You can also complain to the ICO if you are unhappy with how E-J Psychotherapy have used your data. For further details, the ICO’s website is: https://www.ico.org.uk