Privacy Policy
Your Personal Data – What Is It?
Personal data refers to information that relates to a living person who can be identified from that data. Identification may be possible through the information alone or combined with other information in my possession or likely to come into my possession. The processing of personal data is governed by the General Data Protection Regulation (GDPR) 2016/679 and the UK Data Protection Act 2018.
How I Use Your Information
I process personal data to provide counselling/psychotherapy services, including supervision for other counsellors/psychotherapists. This processing enables me to deliver the services you have requested and ensures compliance with my legal and professional obligations.
The personal data I may collect includes:
- Identifiers: Name, address, date of birth, gender, and contact details.
- Sensitive Data: Sexual orientation, personal and family history, medical history (including psychiatric diagnoses or treatments), and ethnicity.
- Technical Data: IP addresses and other information provided through electronic correspondence.
Why I Collect and Use Your Data
Collecting and using personal data is lawful because:
- The processing is necessary to fulfil the services you have requested.
- The processing is required to meet my legal and professional obligations.
- The processing is necessary to protect your life or the life of another person in exceptional circumstances.
How I Share Your Information
I will not share your information with third parties without your consent unless required by law or necessary for professional obligations, such as:
- Legal Requirements: Compliance with court orders or statutory obligations.
- Supervision: Sharing anonymized details with supervisors bound by the same confidentiality and privacy standards.
- Life Protection: Disclosures required to protect your life or someone else’s.
I ensure that all third parties who may process your data are GDPR-compliant and adhere to the same rigorous privacy standards.
Cookies and Online Tracking
If you use my website, please note that it may collect data via cookies and similar technologies to improve functionality, analyse website traffic, or enhance your experience. Cookies are small files stored on your device, and you can manage your preferences through your browser settings.
Third-party services used on my website, such as analytics tools or booking systems, may also collect data in accordance with their privacy policies.
Data Retention and Storage
I retain your personal data only for as long as necessary to fulfil the purposes outlined above or as required by law.
How Your Data Is Stored:
- Digital Records:
- Personal details (e.g., names, addresses, GP information) are stored on a password-protected computer and mobile device with fingerprint protection. Files are also password-protected.
- Email correspondence is retained for record-keeping, with attached files stored securely and password protected.
- Anonymized Records:
- Brief session notes are stored in a locked cabinet.
- An appointments diary with anonymized client names is kept with me for scheduling.
- Cloud Services:
- Some data may be stored using secure cloud services, accessible only by me through password-protected accounts.
How I Protect Your Data
I use a combination of technical and physical security measures to protect your data from unauthorized access, loss, or misuse. This includes encryption, password protection, and secure storage for physical records. In the unlikely event of a data breach, I will inform affected individuals and notify the appropriate regulatory authorities in line with GDPR requirements.
Your Rights Under GDPR
You have the following rights regarding your personal data:
- Access: Request access to the data I hold about you.
- Rectification: Request corrections to incomplete or inaccurate data.
- Erasure: Request deletion of your data under certain conditions.
- Restriction: Request that I restrict the processing of your data.
- Portability: Request your data in a portable format to transfer to another provider.
- Objection: Object to the processing of your personal data under certain conditions.
To exercise these rights, please contact me at the details below:
Email: myriam.ferreira152@gmail.com
If you are dissatisfied with my response, you can raise a complaint with the Information Commissioner’s Office (ICO):
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Phone: 0303 123 1113 or 01625 545 745
- Website: ICO Website
Data Transfers Outside the UK/EU
If your data is stored or processed using cloud services located outside the UK/EU, I ensure compliance with GDPR requirements, such as standard contractual clauses or adequacy decisions.
Lates updated 03/12/24
