privacy

 Counselling in Notts: Website and GDPR Privacy statement 

The data controller is Counselling in Notts.  
Counselling in Notts is registered with the Information Commissioners Office ICO: ZA305045

Here’s the techy bit about the information my website collects.

Cookies
This site uses cookies. These are small text files that are placed on your computer by websites that you visit. They are used in order to make websites work efficiently, as well as to provide information to the owners of the site about people’s use of it.  
session cookies' these are stored only temporarily during your browsing session. To allow normal use of the site and are deleted from your device when the browser is closed.
Personal Information from your device is collected such as geolocation data, IP address, unique identifiers (e.g. MAC address) and other information which relates to your activity through the site. You can choose your use of cookies via the pop up cookie notification and by following the instructions of your device preferences

Analytics
My website host 123 reg collects behaviour patterns of website visitors. This does not identify individuals but shows me 3 things. The number of site visits, number of specific page views, and the type of device used eg mobile, desktop, laptop. 
I also use google analytics as a third party company to also collect behaviour patterns of website visitors. This information does not identify individuals but shows a collection of website usage from the number of website visits, frequently used pages etc. Google’s use and ability to share information collected via Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Use and the Google Privacy Policy.
https://policies.google.com/privacy

Website contact me button
No information from the contact me button is stored by the website. 
I use the personal data of your email address for correspondence with you regarding your enquiry about the services of counselling in notts. I only retain the information for the period we are in correspondence and then it is deleted as confidential waste.
I do not use the information you supply via the contact me button for marketing purposes or share with third parties unless I am required to by law. 

I use gmail when responding to website enquiries. Gmail encrypts messages in transit (techy bit again: using TLS Transport Layer Security) on a basic level this means that emails can’t be read by third parties in transit. You probably have no idea if your email provider uses TLS so please bear in mind that sending information by email can’t always be guaranteed secure so please consider the level of personal information you share in an email.
Google servers are based in the US. Gmail as part of google is covered by the US privacy shield (this is a level of approved security to pass information from UK to the US) so by definition your personal data of email address and IP address may go outside of the EEA. https://www.privacyshield.gov/list

General data protection regulation GDPR information for counselling in notts.
This statement details how I collect, store or share/process your personal data including special category data.
What information do I collect?
Should you wish to become a counselling client I collect?
• Name
• Contact number
• Email
• Address
• Date of birth (if under 18)
• Emergency contact name and number
Financial details ( by proxy on my bank statement after you make payment
Should you wish to book onto my training events.
• Name
• Email address
• Mobile number
• Financial details ( by proxy on my bank statement after you make payment)

What do I use this information for?
This client information is used as contact and emergency contact information while you are in counselling. I collect age for under 18’s to assist me to know when clients will turn 18 for the storing of notes 7 yrs after a child turns 18.(see data retention section below)
The training participant information is used for pre workshop correspondence and your mobile is used for notification in case of emergency cancellation/ bad weather etc. 

Do I share/store your personal data?
I only use your data in relation to the delivery of my services, and do not use it for marketing purposes or sell to third parties (unless you have consented for training event updates). There are very specific limited counselling reasons why I may need to share/process your data.
Legitimate interest
1. It may become necessary during our work together for me to break confidentiality for safeguarding reasons, serious harm to self or others, acts of terrorism or drug trafficking/money laundering. The personal data shared will be adequate and proportionate eg the minimum required. Your information may be shared with health professionals & emergency services as appropriate.  
2. Clinical will. In the event of my death or becoming incapacitated a family member will pass a sealed envelope from my secure storage containing name and contact details of my current clients to my clinical supervisor. This is to enable my supervisor to make contact re my situation and to discuss counselling options going forward to maintain your safety. My clinical supervisor follows the same confidentiality system as me.
Legal obligation
1. I may be required to share information in your notes if I am issued with a court order.
2. I keep anonymous notes from our sessions in line with the requirements of my  
       professional insurance and the limitation act. Special category data 9 (f) processing is  
       necessary for the establishment, exercise or defence of legal claims or 
       whenever courts are acting in their judicial capacity.
3. I am required to keep financial records for the purpose of tax returns for 7 years.
Consent
1. If you ask me to share your notes/information with other medical professionals or your   
        legal representative. 
2. If you ask to be added to my distribution list for notification of my future training events.

How long do I keep your information? (Data retention schedule)
1. If you choose not to continue with counselling after your assessment session your information will be disposed of 2 weeks after as confidential waste. 
2. If you choose to continue with counselling I keep client notes that are anonymous and separately name/email address for 7 years after your last session in line with the requirements of my professional insurance. For under 18’s name/contact and anonymous notes will be kept for 7 years after the age of 18 is reached. 
3. If you book onto a training event I will keep your contact details until one week after the date of the training and keep name, training and attendance data for 7 years.( in line with my professional insurance)

All information is stored as confidential data in locked storage, password protected document or encrypted memory stick and destroyed at the end of the data retention period as confidential waste. 

Your rights under GDPR
• Right to be informed, 
• Right to access (you can request to see information I hold about you) 
• Right of rectification, 
• Right to erasure,                                                             Not applicable to lawful reason legal obligation
• Right to restrict processing, 
• Right to data portability,                                               Not applicable to lawful reason legal obligation /legitimate interest 
• Right to object,                                                               Not applicable to lawful reason/ legal obligation
• Rights related to automated decisions.  
It should be noted that the ICO says these are not all absolute rights:https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

If you have any concerns about how I have used your data you can discuss it with me in the first instance if you feel able to. My contact details counsellinginnotts@gmail.com. You also have the right to complain to the information commissioner’s office ICO. 0303 123 1113    

This privacy statement is kept under regular review. March 26th 2023 V4

If you are a counsellor or therapist you can use this statement as inspiration and a starter for ten along with your own research from the ICO website. https://ico.org.uk/ Make sure you adjust it to your business and your way of working as it will be different. I ask that you do not blindly copy word for word as this document is my intellectual property and coping word for word will see google penalise both you and me in search results. 

Share by: