Introduction to Dr. Kate Crews, Clinical Health Psychology
This document relates to the general data protection regulation laws that took effect on 25th May 2018 (GDPR). This document sets out how Dr. Kate Crews at Clinical Health Psychology complies with these laws. This privacy policy is intended to give you clarity and reassurance by describing how your personal information will be kept safe and secure from initial point of contact through to when therapy has ended.
Data Controller with ICO (Information Commissioners Office)
The term “Data Controller” is used in this privacy policy to describe the person or organization that collects, holds and has responsibility for people’s personal data. Dr. Kate Crews is the Sole Trader and Data Controller. Dr. Kate Crews is registered with the Information Commissioners Office (# TBD). Partners and associates taking on referrals from Dr. Kate Crews will be data processors for the clients/patients they work with directly as they may hold confidential data that is not shared with Dr. Kate Crews.
What personal data is held
Dr. Kate Crews collects and processes the following personal data from clients and patients:
- Personal data: Basic contact information (name, address, email, contact number, GP address, emergency contact etc.)
- Sensitive personal data: Therapy records (therapy notes, letters, emails, phone call notes, reports, assessments etc.)
- Medical data: If seeing a psychiatrist or when relevant and agreed by client from other medical professionals.
What we will do with your personal information
xx
How long do we store personal information
Personal data is retained for a period of 7 years in accordance with the guidelines set out by the British Psychological Society (BPS) and Health and Care Professions Council (HCPC).
How do we ensure the security of personal information
Note taken in session will be kept on paper in a locked cabinet with a coded identification such that you can not be identified by these notes alone.
What rights you have over your data
Under data protection law, you have rights including:
- Your right of access – You have the right to ask me for copies of your personal information
- Your right to rectification – You have the right to ask me to rectify personal information that you think is inaccurate. You also have the right to ask me to complete information that you think is incomplete.
- Your right to erasure – You have the right to ask me to erase your personal information in certain circumstances.
- Your right to restriction of processing – You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability – You have the right to ask that I transfer the personal information you gave me to another organisation, or to you, in certain circumstances.
Subject Access Requests
A Subject Access Request (SAR) permits individuals to request a copy of their personal information. A SAR must be acted upon within one calendar month in most instances. Where the request is complex, an extra two months can be taken, the requester must be informed of the delay.
There are no fees unless there are disproportionate costs incurred in preparing and sending out the information. The SAR application will be held alongside the session records.
How to contact us
Dr. Kate Crews
[email protected]
How to contact the appropriate authorities
Should you wish to make a complaint regarding the handling of your data under this policy, you should contact Dr. Kate Crews via the contact information above in the first instance.
If you feel that your complaint has not been addressed in a satisfactory manner, you may then contact the information commissioner’s office:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
https://ico.org.uk/