GDPR Privacy Notice

Introduction

It is very important in the therapeutic relationship that you trust that your details are kept securely and have information as to what happens to them during and after therapy.

This privacy notice discusses your contact details and any notes made during and after any sessions that we have together.

It is important that you read the policy carefully and contact with any questions or concerns about my privacy practices.

Who we are?

Julie Barfoot is the data controller for Julie Barfoot Talking Therapies.

What information do we collect?

Name, date of birth, address, contact details e.g. telephone, email, next of kin (for emergency purposes).

I, Julie Barfoot, collect data through the client contract for self-referrals and any referrals from insurance companies or other sources of referral that you will have agreed, previously with the referrer, to be given.

I, Julie Barfoot, will only be processing personal data e.g. any information relating to an identified or identifiable natural person. I, Julie Barfoot, will not be processing any sensitive personal data e.g. data consisting of racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, biometric data, data concerning a natural person’s sex life or sexual orientation.

How do we use personal information?

Delivering marketing and events communication e.g. for your information only.

Carrying out polls and surveys e.g. for assistance with therapy

Providing a service.

Legal obligations e.g. BABCP professional ethics

Account set up and details e.g. for contact between sessions.

Sending previously discussed information to you.

What legal basis do we have for processing your personal data?

The following are the relevant processing conditions contained within the GDPR.

Consent e.g. any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by statement or by clear affirmative action, signifies agreement to the processing of personal data relating to them. You can withdraw your consent at any time.

Contract e.g. a written contract will be supplied every time that I, Julie Barfoot, employ a processor to process personal data.

Legitimate interests e.g. a clearly articulated benefit to a single company or to society, that can be derived from processing personal data, without consent, in a legal way e.g. your or another person’s/group safety.

Vital interests e.g. in order to protect the vital interests of the data subject or of another natural person.

Legal obligation e.g. as a controller, Julie Barfoot, is required to maintain records of personal data and processing activities. Julie Barfoot will have legal liability, if she is responsible for a breach of your private information.

When do we share personal data?

There are very few circumstances that I, Julie Barfoot, would need to share your personal data and this would usually be with your consent e.g. GP, crisis team. However, I. Julie Barfoot, may need to contact the police, if you are committing or have admitted to committing a crime. Your data will only be shared as a duty of care towards yourself or any other natural person.

Where do we store and process personal data?

I, Julie Barfoot, store your personal data in a locked filing cabinet, as agreed under GDPR 2018. My supervisor is aware of the location of the key, in such circumstances that I, Julie Barfoot, am unable to access the information e.g. illness or death. I also keep electronic notes via a web based confidential application specifically for healthcare professionals called Writeupp.

How do we secure personal data?

I, Julie Barfoot, will keep your personal mobile number on my password protected work mobile and this will be removed one month after cessation of service e.g. discharge or cancellation.

I, Julie Barfoot, will keep any written material in a locked filing cabinet that only I have access to unless in certain circumstances e.g. illness or death, that my supervisor will need access.

How long do we keep your personal data for?

Your personal data will be kept for 7 years, after discharge and then destroyed e.g. cross shredded. Any other information e.g. text, email, telephone number will be deleted after one month of no contact or discharge.

Your rights in relation to personal data

Under the GDPR, I, Julie Barfoot, must respect the right of data subjects to access and control their personal data. Data subjects have certain rights in respect of:

Access to personal information – this would be whilst in a session.

Correction and deletion – this would be agreed whilst in session.

Withdrawal of consent (if processing data on condition of consent)

Data portability – your data will be removed from the filing cabinet and transported to the office, where the therapeutic session will take place, in a padlocked case or transported via password protected confidential laptop and information is kept on a secure confidential web based application called Writeupp.

Lodging a complaint with BABCP, if not satisfied with protection of your data.

If you require to see any information that I, Julie Barfoot, hold then this will be agreed and activated whilst in the therapeutic session. There may be times when data subject rights may be limited, eg if fulfilling the data subject request may expose personal data about another person, this information will be redacted before you are able to view the information held.

Use of automated decision-making and profiling

This is not relevant to information held within Julie Barfoot Talking Therapies.

How to contact us?

Data subject can get in touch if they have questions or concerns about privacy practices, personal information, or if you wish to file a complaint. Please contact verbally, via email Julie.Barfoot@juliebarfoottalkingtherapies or telephone 07746829174.

Linking to other websites / third party content

Any links to external sites and resources from Julie Barfoot Talking Therapies website does not constitute endorsement, and Julie Barfoot Talking Therapies take no responsibility for the content (or information contained within) any linked website.