​

Everything we discuss is treated with the utmost confidentiality. However, there are certain circumstances where I may be required to break this confidentiality. This would only occur if I believe there is a serious risk of harm to you or to others — for example, if you were to express an intention to take your own life, I may need to inform a mental health crisis team.

​

I also have a legal duty to share information in cases involving serious crimes, such as terrorism or human trafficking, or where there are concerns around the protection and safeguarding of children or vulnerable adults.

​

Wherever possible, I will aim to discuss any need to break confidentiality with you beforehand. However, there may be instances — particularly involving safeguarding or legal obligations — where I am unable to do so.

​

In accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, I am considered a data controller in my role as a psychotherapist. This means I am responsible for processing certain personal information, including your name and contact details, your GP, a record of all financial transactions and the dates of your sessions with me.

​

I also keep brief, factual session notes which are anonymised and stored separately from your contact information to help ensure your privacy is protected.This data is stored securely on my drive and will be destroyed after seven years, in accordance with guidelines set by my insurance provider and  the British Association for Counselling and Psychotherapy (BACP), with whom I am registered as a psychotherapist.

 

Your contact details may be accessed by my clinical supervisor and/or the executor of my clinical will, but only in the event of my sudden illness, accident, or death, and solely for the purpose of informing you of such an eventuality. Any other access to your data would only be granted if required by law.

​

Your information will not be shared with any third parties unless it is necessary for onward referral or continuity of care — and this would always be discussed with you beforehand. The purpose of holding this data is to enable me to provide a psychotherapeutic service, along with the necessary associated administration.​The legal basis on which I process your data is your consent.

You have specific rights in relation to your personal data, including: the right to withdraw consent; the right to access your data; the right to request erasure of your data; and the right to ensure that the information I hold about you is accurate and up to date.

​

A full list of your rights can be found on the Information Commissioner’s Office (ICO) website at www.ico.org.uk, under Your data matters / Your rights. If you have any concerns about how your data is being handled, you are entitled to contact the Information Commissioner’s Office (ICO), with whom I am registered.

​