Privacy Policy and Data Protection
Your data - what I collect, how and why
I (Caitlin Evans) am a therapist in private practice. As part of my job, I will need to keep information on you as a client.
I am registered with the Information Commissioner's Office (ICO) to show my commitment to keeping your data safe.
When you sign up for a 20-minute consultation, I will collect the following data:
-
Your name - so I can get to know you and provide you with therapy.
-
Email address and phone number - so I can contact you to arrange therapy, or in case we become disconnected during online therapy.
-
Age - during the consultation, I will collect your date of birth if you wish to book your first session. I can only work with those aged 18 and over.
From your first therapy session, I will collect further data:
-
Your address - if we ever work online, I will need to know your address in case of an emergency (for example, sending emergency services to your house if you are in danger during our session). I will always attempt to inform you of this action before I do so.
-
Your GP's details - as above, so I can contact your medical provider in case of an emergency.
-
Next of kin - as above, so I can contact someone you trust in case of emergency.
-
Health issues/medication information - you may choose to share relevant health information with me so I can continue to keep you safe.
Will I ever share your information?
I will never sell your information to anyone else.
I may have to share your personal information if:
-
My notes are subpoenaed by court order.
-
If you or someone else is at risk of serious harm, I may contact your GP or the emergency services.
-
In the unfortunate event that something happens to me and I am incapacitated, I have appointed a Clinical Executor who will contact you to inform you.
You have the right to request to see, amend or have destroyed any data I hold on you. I will aim to respond to any such request within 14 days.
How will I store your data?
I store your data digitally on a computer and note-taking device. All data I hold on you is password protected. Session notes are anonymised with a code and kept separate from your personal data in different files.
I will store your phone number on my business mobile phone under your client code. This phone is password protected.
How long will I store your information and how will I dispose of it?
Adults: I will keep your session notes, name and unique code for five years after we finish our work.
Children: I will keep your session notes, name and unique code for five years after your 18th birthday.
This is required by my insurance. After these times have elapsed, I will delete/destroy all information I hold on you.
I will delete your phone number from my business mobile one month after we finish working together.
I will delete any emails or messages sent one month after we finish working together.