As a client within the practice, in order to comply with data protection laws including the new GDPR (General Data Protection Regulation), there are a few things we need to let you know about the information we will hold about you and the reasons for this. Everything we do follows normal good practice for holding data generally as well as for a therapeutic practice, but it’s important and your legal right to read and understand the information before you come for treatment with us.

Information we hold about you

When you come for treatment, we take your name and contact details (address, phone numbers, email address), and your date of birth, as well as notes about your history that you give to us. This can include information about your physical and mental health, as well as personal history that you choose to give us. All of this information will be given directly by you – some, such as your name and contact details, you may have supplied when we initially made contact and most will then be given in your session. Over time in future sessions, we will add to this information as you talk more about your circumstances or the issues you are seeking help with. We will also note my impressions from our sessions including what we perceive through the complementary therapy treatment.

How is this information used?

Your contact information is used only in order to arrange appointments or to follow up with you, and never for any other reason. The case history information is important in order to understand your situation, get to know you and give you the best treatment possible, as well as to be able to track your progress over time. Monthly newsletters with updates on information can be opted out of by clicking unsubscribe at the bottom of the email.

Reasons for holding information

The reason for all of these details is in order to give you the best complementary therapy that we can. Because the work we do together is to support your health whether physical, mental or emotional, it’s important to hear some of your history in order to work with you responsibly and carefully, as well as to track your progress with you over time. You can choose how much you wish to share about your history and you should never feel obliged to talk about anything that you don’t want to. Although notes are taken, we may not note every detail of your verbal conversations but just what is needed to keep a clear record of how you are doing.

The Legal Basis for holding your information

Under the GDPR regulations, there are specific legal reasons which have to be met in order to hold information and which you have the right to know. In legal terms, the main reason for holding information about clients is in order to fulfil a ‘contract’ with you to give complementary therapy. In addition, because the information that is talked about in any kind of therapy can be very personal including information about physical or mental health, this is called ‘special categories’, and there is a separate legal basis for this with strict conditions such as confidentiality which must be met.

Sharing information about you

In general, your information is never shared with anyone else unless you ask me to do this. As you would expect within a therapeutic relationship, and as a requirement of the Code of Ethics of the professional body the CSTA, and The Professional Standards Authority, you can be assured that all of the information we receive about you is treated in complete confidence and will not be shared with others or used for any other purposes.

How long will I keep your information?

We are not allowed to hold on to your personal data for longer than needed, and only related to the original reason for holding the information in the first place. After that we may retain your records for a limited time where needed for business /accounting or legal purposes. This is called the retention period. Our professional bodies requires us to keep your notes for at least seven years after your last visit if you are an adult, or up to age 21 plus seven years for children. For those who

legally lack ‘capacity’, the rules are more complicated but will usually be at least 15 years rather than seven, sometimes followed by legal advice. In order to be able to provide follow- up if clients return after a break, as well as to allow time for disposal of notes, the maximum time I will keep your notes is ten years. After this time, they are shredded.

Security

We are very aware of the sensitive nature of the information we receive as practitioners and  take steps to protect your personal information against loss or theft, as well as unauthorised access, disclosure, copying, use, or modification. Given that emails can never be guaranteed to be fully secure, and that they may count as ‘data processing’ under the GDPR, if you want to discuss something personal about your situation or treatment we ask that you contact me  to arrange a chat rather than sending personal information by email.

Your right to refuse to give information

Under the GDPR, you are not required to give your personal information, and you have right to be informed of any consequences of refusing to give it. A case history is needed in order to ‘fulfil our contract’, to give you the best treatment possible, including understanding your situation and any difficulties you are seeking help for, as well as to comply with the practitioner’s Code of Ethics. So, if you do not wish to give any information at all we may be unable to give you any complementary therapy, but we are always happy to have a chat about what may or may not feel comfortable for you.

Your right to object to me holding your information

If you object to us holding your information, you can ask us to stop. Because our Code of Ethics has a requirement for us to keep notes for a minimum time as described above, we will need to retain your records in order to comply with this.

Your right to see what information we hold about you

If you request it we must give you a copy of the information we hold about you. This can be in paper or electronic form, and we can explain the notes and respond to any concerns or questions you may have.

Your right to ‘rectify’ any information we hold which is not correct

If you believe that any of the information we hold about you is inaccurate or incorrect you have the right to tell us about this and request that the information is corrected. Please do let us know if any of your details change so I can keep your records up to date.

Your right to make a complaint

You have the right to complain if you are unhappy about the way we look after your information, or feel we have not properly respected your rights – in the first instance to the practitioner concerned, and then also to the professional body, CSTA or if you are still unhappy to the Information Commissioner’s Office (ICO) https://ico.org.uk/concerns/ or 0303 1231113

Understanding and agreeing to this information

You should make sure you understand and agree to us keeping this information about you – if you have any questions at all please ask and I’ll be happy to answer them.

Changes to this notice

We may make changes to this notice and information from time to time, for example if there are changes in the laws about data protection. While you are a client, we will always let you know of changes by email and updating this information.