GDPR, Data Protection and Confidentiality
 

Keeping your personal data secure and safe is a priority of mine. I invite you to read my privacy policy below to understand how the General Data Protection Regulations (GDPR), my insurance policy and my professional bodies code of ethics affect the way I handle your personal information.

I am the Data controller and the Data Protection Officer. My contact details are lauren@nutmeg-therapy.com  and 07716413888

This website is aimed at potential clients seeking therapy. I gather information from the details you provide either in person, on the phone, via email, video link or via an online enquiry on my site.

There is no legal requirement for you to provide this information, but without it I will be unable to provide you with the service I offer.

The collection of your personal information enables me to decide if I am able to take you on as a client and offer you an appointment, to provide you with treatment, to contact you regarding your treatment and to invoice you for any outstanding payments.

The data I collect from you as a client may include your name and contact details, information about your symptoms/triggers, current and past relationships/experiences, your family background and your medical history.

In line with these guidelines, you accept that when you contact me and/or provide me information, you permit me to hold and use this information.

Children: In collecting information from persons under the age of 16, consent must be provided by their parent or guardian in oder for me to process their data lawfully.

If you choose to share information using a social media button, you  do so at your own discretion and accept that by doing so, may publish content to your social media profile feed and page.

Client confidentiality means that I will not disclose information about you to a third party without your permission. The includes not acknowledging I know you if we were to bump into each other outside of sessions, not divulging information about you having treatment with a third party and ensuring your session notes are locked away By giving me your phone number, you are permitting me to message you and to leave messages on your voicemail should I not be able to get hold of you, unless you state otherwise

I am duty bound to breach confidentiality if there is a legal requirement for me to do so, such as where the children’s act applies, a court order is issued, or if I have good reason to believe that significant harm to you or another person should arise if I were not to disclose the information.

You have rights over the information I hold about you. These are:

Portability- you can request I share your information with someone else.

Rectification - If you believe there are any inaccuracies in your records, you can ask me to change them.

Erasure - In certain circumstances you may have the right to ask me to remove your details from my records verbally or in writing. ( This is sometimes called ‘the right to be forgotten’).

Fair profiling - you can ask that any processes that I automate are done by a person instead of a computer. I don’t currently automate any information processing, although I do use online forms to collect information.

Right of access - you can have a copy of the information I hold at any time, by requesting it in writing. If you do this, it will be provided in 30 days and free of charge.

Restricting processing- In some circumstances you can request that I stop processing your information.

Objection - you can object to the way I process information e.g if it is used to send you direct marketing and you do not wish to receive this, and therefore ask me to stop using it in this way.

Information - you have the right to understand how I collect and  process your information.

You can withdraw your personal information with permission at any time, although it may mean ceasing treatment.