About This Privacy Notice
This notice explains how, why and when I collect personal data, how and why I use it, how I keep it secure and your rights in relation to it. In this context, personal data is that which can be used to identify an individual. The collection and processing of personal data is governed by the EU General Data Protection Regulation (“GDPR”), with which I comply.
The GDPR is regulated in the UK by the Information Commissioners Office (ICO). Further information about the GDPR may be found on the ICO website – ico.org.uk
The legal basis upon which I collect and process your personal data is consent, i.e. that you give your consent for me to collect and use your data, as set out in this privacy notice.
I reserve the right to amend this privacy notice from time to time without prior notice. However any changes which may affect you will not be made retrospectively.
Who Am I
I am Poospah Riley. You can contact me by email on [email protected] or by telephone on 0118 969 8740 (please leave a message if I do not answer). For the purposes of the GDPR I am both the data controller and data processor.
What Data Is Collected and Why
(a) If you contacted me using the Email Contact Form on my website your information is passed to me by WebHealer who are the internet service provider (ISP) for my site. Your enquiry was sent directly to me by email and then deleted from the WebHealer systems.
(b) If you come to me for a session I will ask you to sign a contract which sets out how we will work together, confidentiality, necessary disclosures and cancellations.
(c) Case notes. I keep very brief notes on how each session went. These are for my own use but if you wish to see them then that is your right.
How Your Data Is Protected
Your contact details and case notes are kept in a locked cabinet. I generally keep this information for 3 years before securely shredding and disposing of it.
If you contacted me by email then I may keep that email on my computer indefinitely, unless you specifically ask me to delete it.
I have regular supervision of my practice and during supervision I may discuss my clients with my supervisor. However I will never use client names, I will always use a false, made-up, name, in order to protect your identity.
Who Else Has Access To Your Data
I will not pass your contact details or any other personal data about you to any other party or parties. The only exceptions to this are those provided for under the law, which include:
• If you tell me that you know of harm being done to you, another person, a vulnerable adult or child or if you are harming yourself or others.
• If you divulge any knowledge of acts of terrorism, drug trafficking or money laundering.
• If you divulge any knowledge of the whereabouts of children in care who are missing.
In these circumstances it may be necessary for me to contact the police and/or your GP, as appropriate.
If you have given me details of an emergency contact and you become seriously ill during one of our sessions then, in addition to calling the emergency services, I will also attempt to contact your emergency contact.
Regarding the information that I keep about you, the GDPR provides you with the following rights:
• The right to be informed (that’s the purpose of this privacy notice).
• The right of access (you can ask me what information I have about you).
• The right to rectification (you can ask me to correct it if it’s not correct).
• The right to erasure (you can ask me to delete your data).
• The right to restrict processing (I’m not sure this applies to the information you give me).
• The right to data portability (you can ask me to send you your data in machine readable form).
If you wish to exercise any of these rights then please get in touch.
If you have any complaints about how I store or process your personal information then please let me know. However if you are still not satisfied you may take your complaint to the Information Commissioner. Their contact details are as follows:
Information Commissioner’s Office
Telephone: 0303 123 1113
Web page: ico.org.uk/concerns