CP Therapy – GDPR (General Data Protection Regulation) Policy:

I take your privacy seriously and I am fully committed to ensuring that your privacy is protected.

My business is registered with the Information Commissioners Office, the UK authority for upholding data protection, www.ico.org.uk. I am bound by their policies with regards your privacy, as well as the BACP code of professional practice.

Why I need your data:

I require your basic personal data to be able to contact you outside of counselling sessions, and in case of an emergency. I do not collect any personal data from you that I do not need to be able to do this.

What I do with your data:

All the personal data I have is processed by myself. However, this information is located on a server within the European Union. No third parties have access to your personal data unless the law allows them to do so.

I have a data protection regime in place to oversee the effective and secure processing of your personal data. Any personal information located on my computer is password protected and only accessed by myself, Claire Padgett. Any paper copies are kept in a locked cabinet only accessible by me. Your mobile phone number is saved on my phone for contact purposes only and is saved under your initials only.

How long do I keep your data:

I keep your personal data for the duration of our work together. Once the work is finished and we have ended sessions, I will destroy any personal data I have kept. However, I am required under UK tax law to keep a copy of invoices I have sent you which have your name on for a minimum of 6 years, after which time they will be destroyed.

What are your rights:

If at any point you believe the information I process on you is incorrect you can request to see this information and have it corrected or deleted. If you wish to raise a complaint on how I have handled your personal data, you can contact me to have the matter investigated. If you are not satisfied with my response or believe I am processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office at https://ico.org.uk/.