GDPR Privacy Notice
The General Data Protection Regulation (GDPR) which is EU wide and far more extensive than its predecessor the Data Protection Act, along with the Privacy and Electronic Communications Regulations (PECR), seek to protect and enhance the rights of EU data subjects. These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data and the unrestricted movement of personal data within the EU and its storage within the EEA.
I Dr Siobhan McCarthy provide the following information:
Who I am –
I am a Clinical Psychologist and approach my work with the utmost regard for a client’s wellbeing and rights. The Health and Care Professionals Council (HCPC) and The British Psychological Society (BPS) regulate and inform my practice. You can find out more about my professional and legal responsibilities on their respective websites.
The same, or similar professional bodies (i.e. BACP) regulate the practices of my Associates who work with me under the UK Psychologists banner. UK Psychologists is not a company or unincorporated association.
Please see about me section on my website for more details on who I am.
Please see my Associate’s webpage for more detail about my associates.
Information I, or my Associates, and the UK Psychologists website collect about you and how we use it –
For the purpose of providing treatment
Upon starting therapy, basic personal information will be collected for contact and identification reasons. During our therapy meetings, an assessment of your/your child’s psychological health will be completed, and notes will be taken during sessions. These will include personal and sensitive details about your life. The assessment and notes are used solely for the delivery of a therapy service to you.
I will only collect the information needed so that we can provide you with the services you require, I do not sell or broker your data.
When someone visits this website, we use a third-party services, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way, which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
The information about confidentiality in no way contravenes you and your child’s rights under the General Data Protection Regulation May 2018 to access personal data that I/my Associates hold about you. I/my Associates keep confidential records about all the clients we work with. Information but not names may be shared with a supervisor or supervision groups.
Individual supervision and supervision groups are standard for mainstream and reputable providers of therapy such are the demands of clinical practice and safeguarding. If your therapist is not supervised or part of a supervision group, you should request an explanation.
These records are subject to the General Data Protection Regulation May 2018.
You and your child’s personal and sensitive personal data will only be used in order to provide the service to you/your child and for managing and quality assuring the service.
Psychotherapy is a private and confidential form of help. I/my Associates hold information about each of our clients and the psychotherapy they receive in confidence. This means that we will not give your name or any information about you to anyone outside the organisation. However, there are exceptional cases where we might ethically or legally have to give information to relevant authorities, for example if we had reason to believe that someone, is at serious risk of harm, to prevent a miscarriage of justice or at the legitimate request of the legal system. We would normally discuss any proposed disclosure and obtain your agreement, unless we believe that to do so could increase the level of risk to you or to someone else.
If you come with a partner or your family, I/my Associates may suggest seeing each of you individually. It is important for you to know that what you share may be brought into the couple or family work.
As a fully accredited member of the HCPC and BPS, I adhere to their ethical framework and guidelines to ensure that you receive a professional and quality service. My Associates hold the same accreditation.
We recognise that on rare occasions our clients may wish to exercise their rights under the General Data Protection Regulation May 2018 and make a subject access request in respect of their personal information held by us. You have rights relating to the information we hold to verify the accuracy or to ask for it to be supplemented, deleted, updated or corrected. You have the right to request a copy of the information that we hold about you. If at any time you wish to exercise your right under the Act you should put your request in writing to me/or one of my Associates and provide evidence of your identity such as a copy of your passport or driver’s license and proof of your address.
When I receive evidence of identity, we I will respond to your request within 30 calendar days. My Associates will all operate their own process which you should ascertain from them.
My response to a valid subject access request will normally be in the form of a schedule listing and describing the personal data I hold on you/your child. You have a right to request the transfer of your data to another individual or company. I want to make sure that your information is accurate and up to date. You may ask me to correct or remove information you think is inaccurate. You have a right to request the transfer of your data to another individual or company.
Lawful basis for processing your information
The lawful basis for my holding and using your information is in relation to the delivery of a contract to you as a health care professional. As an accredited and Chartered Clinical Psychologist, I operate under a strict code of confidentiality, as do my Associates.
All Data I hold is held in the United Kingdom. I do not store personal data outside the EEA. All data storage services used are fully GDPR compliant and available on request.
How long is information stored for – data retention
Your information is kept for the time necessary to provide the therapy service requested, however outside of this I will hold your details and session notes for a period of 7 years following the end of treatment to comply with legal obligations that are placed upon me by my insurers. In the case of a child under 13 then records will be kept 7 years after they reach the age of 18. After this date, all data will be securely deleted.
Please switch off your mobile phone during your therapy sessions as it can create an unhelpful distraction and interruption.
Unauthorised electronic recording
In order for you to work safely and effectively with a psychologist, it is important that the privacy of the work is respected. Please do not attempt to record your therapy session using any device or app. If it is found that recordings have been made covertly, therapy services for the individual responsible will be discontinued immediately and I reserve the right to seek legal advice regarding possible further action.
Reports and client records
Occasionally I am asked by my clients or by external agencies such as Social Services, healthcare providers or the NHS to write reports on the progress made in therapy. I am not normally in a position to do this because of my duty of confidentiality. However, in some circumstances, and on receipt of written consent from the client(s) who attended therapy, I can provide brief, “need to know” information about session progress and outcome, including dates and number of sessions attended.
Children and vulnerable adults in particular must be given ample opportunity to understand the nature, purpose, and anticipated consequences of any professional information sharing, so that they may give informed consent to the extent that their capabilities allow. Whilst requests of this nature are common, and often helpful, I can only agree to participate in information sharing with informed consent and when it is my professional opinion that it is in a client’s best interest.
In addition, I am occasionally also asked by clients, their solicitors, the police and the courts for access to the client records. These are not suitable as evidence in legal proceedings, and I reserve the right to resist legal requests to produce the records in court. I do this in order to protect the duty of confidentiality of my clients and to preserve my reputation as the provider of confidential therapy. If you suspect that you will need information to be shared in court or other proceeding, then it is your duty to disclosed this as soon as you are aware this may be required.
There may be times where your information needs to be shared with 3rd parties. I will explicitly ask your consent before doing so, and the data will be sent to 3rd parties securely.
If you intend to cancel, at least 72 hours’ notice should be given to avoid cancellation charges. If less than728 hours’ notice is provided, you will be charged the full cost of your session to cover the incurred costs.
If a health or insurance company is paying for your treatment, they may make you liable for the charge. Your treatment sessions could be suspended dependant on their policy.
We will review sessions regularly to ensure you feel you are getting the most out of therapy; you are not tied into any commitment . You can end sessions at any time, although a planned ending is recommended to all for review and to reflect on goals achieved. If I consider your requirements beyond my competence, I reserve the right to terminate our contract, this will be discussed in the session and recommendations would be provided
Feedback and complaints
If you have any feedback about the service you receive from me, or you are not satisfied with your experience, please do contact me. It is possible that I can resolve your complaint and I welcome feedback. I will always take it seriously as it allows me to improve the service that I can offer to others.
At the start of treatment a consent form is given to you which enables you to agree processing your personal data for the purposes outlined above.
For further information or you wish to make a complaint please contact:
Name: Dr Siobhan McCarthy
Contact Number: 07796 530406
I am registered with the ICO https://ico.org.uk
My reference number is: A8926802 If a client is referred to an Associate, they will be the primary data controller for that client. Please refer to them if there are any queries around privacy and data control.