Privacy Policy
Privacy Policy
As the data controller, I collect, store, and have responsibility for your personal data. If you have any questions about my data protection policy, please contact me using the details below.
I am registered with the Information Commissioner’s Office (ICO) and my registration number is ZB878584. My phone number is 07492591897, and my email address is info@theaffairsoftheheart.com
Lawful Basis for Holding and Using Your Personal Information
The GDPR requires that I have a lawful basis for processing your personal data. Depending on our relationship, my lawful basis for processing your data is:
- Legitimate interest if you have previously had therapy with me, but it has now ended.
- Performance of a contract if you are currently in therapy or inquiring about therapy.
For special category personal information, my lawful basis for processing is that it is necessary for the provision of health treatment (counselling and psychological therapy) under a contract with a health care professional (me).
How I Use Your Information
Initial Contact
When you contact me with an inquiry about my counselling and psychology services, I collect personal information to address your inquiry. This may include your name, address, date of birth, phone numbers, email address, emergency contact details, GP information, and details relevant to your reason for seeking therapy.
If you decide not to proceed with therapy, I will delete your personal data within one month unless you request earlier deletion.
While You Are in Therapy
Upon entering a therapy contract, I will ask for additional information relevant to our work, such as therapy goals, health history, medication use, and family background. I keep these records securely and separately from your personal contact details.
I maintain notes of our sessions to support your therapeutic progress, and these are stored securely. Text messages are deleted within two weeks unless transferred to your records. Emails are deleted after one month unless necessary for your records.
Limits to Confidentiality
Your confidentiality is of utmost importance. However, there are circumstances where I may need to break confidentiality, including:
- If required by law, such as a court order.
- If there are safeguarding concerns regarding a child or vulnerable adult.
- If you are at serious risk of harming yourself or others.
- In cases of terrorism, fraud, or money laundering.
Where possible, I will discuss this with you before taking any action.
After Therapy Ends
I retain records for seven years after therapy ends to meet legal and insurance requirements. After this period, records are securely destroyed. If you would like your records deleted sooner, please let me know.
Third-Party Recipients of Personal Data
I may share your personal data with third-party providers, such as my email and phone service providers, but only when necessary for service delivery. I have agreements in place to ensure your data remains secure.
I am a registered member of the Health and Care Professions Council (HCPC) and adhere to their professional standards and code of conduct. My practice is supervised in accordance with HCPC guidelines to ensure ethical and high-quality care. However, I do not disclose any personally identifying information about my clients in these sessions.
Data Security
I take data security seriously. My devices are password-protected and encrypted, and my email service uses encryption. Paper records are stored securely in a locked filing cabinet. For video therapy sessions, I use GDPR-compliant platforms such as Zoom or MS Teams, and I do not record sessions.
Your Rights
You have the right to:
- Request access to the personal data I hold about you.
- Ask for corrections to any incorrect information.
- Request deletion or restriction of your personal data.
- Object to the processing of your personal data.
To request access to your personal data, please email me at info@theaffairsoftheheart.com. If you have any concerns about how I handle your personal data, I encourage you to contact me directly. Alternatively, you can also raise the issue with the ICO at Make a complaint | ICO
Visitors to My Website
I use Google Analytics to collect anonymous data on website visits. No user-specific data is collected by me or any third party.
This privacy notice ensures transparency and compliance with data protection laws. If you have any questions, feel free to contact me at the details provided above.