GDPR is concerned with the personal information about you that I, Nicola Flinn, in my capacity as a counsellor/psychotherapist collect, store and share.

​

I will collect from our initial contact (telephone/email) contact and during treatment:

​

1) Your name        

2) Your D.O.B     

3) Home address     

4) Your email address

5) Your telephone /mobile number (plus permission to send texts and leave voice messages)

6) The nature of your enquiry        

7) Difficulties /issues    

8) Counselling history

9) Relationships and family past and present        

10) Occupation and education

11) GP’s name and contact details                

12) Medical history

13) Prescribed medication

14) Session notes             

15) Any other documents relevant to the therapeutic process

 

How I will store your personal information:

Paper - written notes are in a securely filed and locked filing cabinet (Archway Health Hub clients).

Computer based notes - may be kept on a secured/encrypted laptop/stick. The device will be checked regularly for viruses. I will take every reasonable precaution to protect your personal information.

Mobile phone - I may store your contact telephone number along with any text messages which we may exchange.

Email - your email address and correspondence will be stored securely in my email account (currently gmail).

 

How I may process/share your personal information:

 

Supervision: in compliance with my accreditation organisations (BACP, BPS) I am required to attend regular supervision sessions with a suitably qualified therapeutic supervisor. Although aspects of your case may be discussed, your contact details will not be revealed. My therapeutic supervisors are bound by similar confidentiality and GDPR policies.

 

Therapeutic will: your name and contact details will be shared with my Therapeutic Executor. This is so that you will be contacted on the event of my death, should you still be in therapy with me.

 

Breaking confidentiality

If I believe yours or another person or group of people’s safety is at significant risk, I may contact the suitable authority without your permission. This includes your doctor, the emergency services and the mental health crisis team.

​

I am also required by law to pass on information relating to acts of terrorism and ongoing abuse of a minor or vulnerable adult. I will at all times attempt to gain your permission before breaking confidentiality in these instances however I retain the right to do so without your consent.

​

Erasing your information

When I have finished working with you, all information I hold about you will be shredded/deleted after a period of 12 months. Paper process notes taken during sessions will be destroyed once summarised. 

 

Your rights

To be informed what information I hold (i.e. this document).

To see the information I hold about you.

To rectify any inaccurate or incomplete personal information.

To withdraw consent to me using your personal information.

To request that some or all of your personal information be erased (though I can decline whilst the information is needed for me to practice lawfully and competently).