The General Data Protection Regulation (GDPR) became law on 24th May 2016. This is a single EU-wide regulation on the protection of confidential and sensitive information. It enters into force in the UK on the 25th May 2018, repealing the Data Protection Act (1998).
The following information describes how your personal data is collected, used and processed by CBT Hathi Therapies and how we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights.
Your rights
We are committed to protecting your rights of privacy. They include:
Collection of Personal Information
Helen Watson who is the owner of CBT Hathi Therapies is referred to as, the ‘Controller’ of the personal data you provide. Basic personal data about you including name, address, contact details, such as email and mobile number etc are collected. If applicable, we will also collect further confidential information from referring services such as your GP, other therapist or clinic for instance. This information is collected with legitimate interest by your therapist who will need to view and analyse this information in order to carry out an initial assessment or to deliver the appropriate care required.
To ensure you are both assessed and/or treated safely and appropriately, your personal information is recorded, as well as all contact you have with your therapist, such as appointments, therapy notes, outcome of sessions and any letters received or written relating to your care. This data is kept secure and confidential by your therapist – any limitations of confidentiality with regard risk will be discussed at your initial appointment (see Sharing Personal Information).
Your Therapist may also collect the following information regarding:
Protection of Records
The therapist is responsible for record keeping, data protection and safe storage of notes in accordance with professional guidelines (e.g. NMC, BABCP), and in compliance with EU General Data Protection Regulations (GDPR) rules.
Records stored by CBT Hathi Therapies are kept in a secure file, not on a desktop. Physical records are kept in a secure locked cabinet when not in use. Any electronic data is encrypted. Any data that holds sensitive information such as the client’s name is password encrypted.
Sharing of Personal Information
In most circumstances, we will not disclose personal data without consent. Your information may be shared with outside organisations if they are directly involved in your care, for instance, organisations funding your treatment or your GP. However your Therapist will discuss with you who they discuss your care with, and what details they will share with them. This will be limited to relevant and appropriate information.
If your health is at risk your Therapist may share your contact information with an emergency healthcare service. If you are under 18 years old and your health is at risk, your information may be shared with your parent/guardian.
If your therapist becomes aware of your intent to cause harm to another person/organization, they have a legal obligation to inform an authority without seeking your permission.
Destruction of Data
All client information and data is required by law to be kept for seven years following the date of the client’s discharge. Once this period has ended all data is permanently deleted from any laptop, handheld mobile device, or any physical copies will be destroyed. Physical paper copies are destroyed by monitored incineration.
Complaints or Queries
We aim to meet high standards when collecting and using personal information. For this reason, we take complaints about this very seriously. We would encourage individuals to raise any concerns with us regarding any collection or use of information that is considered to be unfair, misleading or inappropriate. We also welcome any suggestions for improving our current procedures. If you do have a complaint, you can find CBT Hathi Therapies’ contact details on our website: www.hathi-therapies.co.uk
The following information describes how your personal data is collected, used and processed by CBT Hathi Therapies and how we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights.
Your rights
We are committed to protecting your rights of privacy. They include:
- Right to be informed about what we do with your personal data
- Right to have a copy of all the personal information we process about you
- Right to rectification of any inaccurate data process, and to add the information we hold about you if it is incomplete
- Right to be forgotten and your personal data destroyed
- Right to restrict the processing of your personal data
- Right to object to the processing we carry out based on our legitimate interest
Collection of Personal Information
Helen Watson who is the owner of CBT Hathi Therapies is referred to as, the ‘Controller’ of the personal data you provide. Basic personal data about you including name, address, contact details, such as email and mobile number etc are collected. If applicable, we will also collect further confidential information from referring services such as your GP, other therapist or clinic for instance. This information is collected with legitimate interest by your therapist who will need to view and analyse this information in order to carry out an initial assessment or to deliver the appropriate care required.
To ensure you are both assessed and/or treated safely and appropriately, your personal information is recorded, as well as all contact you have with your therapist, such as appointments, therapy notes, outcome of sessions and any letters received or written relating to your care. This data is kept secure and confidential by your therapist – any limitations of confidentiality with regard risk will be discussed at your initial appointment (see Sharing Personal Information).
Your Therapist may also collect the following information regarding:
- Relevant Medical Conditions
- Prescribed Medication
- Psychological history and current difficulties
- Sexuality
- Offences (including alleged offences)
- Financial information, including bank account details (the latter, only in the event of a payment being made by CBT Hathi Therapies to a private paying client eg. for refunds where appropriate)
Protection of Records
The therapist is responsible for record keeping, data protection and safe storage of notes in accordance with professional guidelines (e.g. NMC, BABCP), and in compliance with EU General Data Protection Regulations (GDPR) rules.
Records stored by CBT Hathi Therapies are kept in a secure file, not on a desktop. Physical records are kept in a secure locked cabinet when not in use. Any electronic data is encrypted. Any data that holds sensitive information such as the client’s name is password encrypted.
Sharing of Personal Information
In most circumstances, we will not disclose personal data without consent. Your information may be shared with outside organisations if they are directly involved in your care, for instance, organisations funding your treatment or your GP. However your Therapist will discuss with you who they discuss your care with, and what details they will share with them. This will be limited to relevant and appropriate information.
If your health is at risk your Therapist may share your contact information with an emergency healthcare service. If you are under 18 years old and your health is at risk, your information may be shared with your parent/guardian.
If your therapist becomes aware of your intent to cause harm to another person/organization, they have a legal obligation to inform an authority without seeking your permission.
Destruction of Data
All client information and data is required by law to be kept for seven years following the date of the client’s discharge. Once this period has ended all data is permanently deleted from any laptop, handheld mobile device, or any physical copies will be destroyed. Physical paper copies are destroyed by monitored incineration.
Complaints or Queries
We aim to meet high standards when collecting and using personal information. For this reason, we take complaints about this very seriously. We would encourage individuals to raise any concerns with us regarding any collection or use of information that is considered to be unfair, misleading or inappropriate. We also welcome any suggestions for improving our current procedures. If you do have a complaint, you can find CBT Hathi Therapies’ contact details on our website: www.hathi-therapies.co.uk