Living Well Clinic
Relief & Recovery From Chronic Pain
Privacy Notice
Who I am and how I process your personal data
I comply with my obligations under the General Data Protection Regulation (GDPR) by keeping personal data up to date; by storing (and destroying it) securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
Personal data in this context is any forms you complete at the start of, or during therapy including your name, address, medical history, issue you are seeking therapy for and related information including my notes.
I use your personal data for the following purposes:
- To deliver the services that you have requested;
- To contact you as necessary in accordance with the services you have requested;
- To contact you via surveys to ascertain your opinion on the service you received;
- To maintain my own accounts and records.
In line with the requirements of professional registration, I abide by the Code of Ethics from the National Council of Integrative Psychotherapists (NCIP), and also undertake clinical supervision. Cases are discussed during supervision, all data is sufficiently anonymised to the extent that individual clients cannot be identified.
Your data will never be passed to a third party without your express consent, always provided that such confidentiality is neither inconsistent with my safety or yours, your family members or other members of the public, nor in contravention of any legal action or legal requirement.
Your data will be maintained and securely archived for a five year period post-therapy as recommended by the NCIP.
My lawful basis for processing your personal data
You have given clear consent for me to process your personal data for a specific purpose. Further, the processing is necessary for both our legitimate interests.
Your rights and your personal data
- Unless subject to an exemption under GDPR, you have the following rights with respect to your personal data:
- The right to request a copy of your personal data which I hold about you;
- The right to request that I correct any personal data if it is found to be inaccurate or out of date;
- The right to withdraw your consent to the processing at any time;
The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing; - The right to object to the processing of personal data (where applicable)
- The right to lodge a complaint with the Information Commissioners Office. (See below)
Complaints Notice
You have the right to complain to the Independent Commissioner’s Office (ICO) if you think there is a problem with the way I am handling your data.