Last updated October 2018
Dr Cat St Clair is a Sole Trader offering Clinical Psychology Services. I specialise in assessment and treatment of psychological difficulties for children and adolescents, including parent/family work where appropriate. I also offer clinical supervision and corporate talks.
This policy describes the information that I collect when you use my services. This information includes personal information as defined in the General Data Protection Regulation (GDPR) 2016 and the subsequent UK Data Protection Bill 2018. The policy also describes how I process and store your information when you use my services, if you contact me, or when I contact you.
I use the information I collect in accordance with all laws concerning the protection of personal data, including the Data Protection Act 1998 and the GDPR 2016. I am the data controller for Dr Cat St Clair (firstname.lastname@example.org) and I am registered with the Information Commissioner’s Office (ICO). My Registration Number is PZ3395535.
1. What are your rights?
I am committed to protecting your rights to privacy. These include:
- The right to be informed about what I do with your personal data
- The right to
have a copy of all the personal information I process about you
- The right to
rectification of any inaccurate data I process, and to add to the information I
hold about you if it is incomplete
- The right to be
forgotten and to ask for your personal data to be destroyed
- The right to
restrict the processing of your personal data
- The right to object to the processing I carry out based on my legitimate interests
- I may collect information about you and your child because you
are a patient or client of mine and you have given your consent for me to do
- I process the data because it is in my legitimate and necessary interests as a
Clinical Psychologist to do so. I need
to read and analyse documents containing this information in order to provide
advice, carry out an assessment or deliver psychological intervention.
- If you are a client or patient of Dr Cat St Clair, my lawful reason for processing “special category data” is that it is necessary for the purposes of the provision of health or social care or treatment.
I collect information about you and your child that may include personal or sensitive information, such as:
- First name and surname
- Telephone numbers
- Date of birth
- Gender (or preferred identity)
- Family members
- Telephone numbers
- Email address
4. How do I use the information that I collect?
I will use the data I collect from you in the following ways:
- To communicate with you. I will primarily use email, text messages,
and phone calls to do this.
- To ensure I provide a relevant and responsive
by referring to your information and notes throughout our work together,
- To create your invoice. All invoices
will be sent to you by email, either within the email message or as a PDF if
requested. If your insurer is invoiced for my work, this will be done using
their password protected online system.
- I will never use your information for
marketing purposes or share it with third parties for financial gain.
All information will be stored securely in line with GDPR and ICO guidance. I will keep your information in the ways described below.
- Electronically - I use a personal computer that is located in my
office space. The computer is password protected.
- On my mobile phone - Your number will be stored on my mobile phone
whilst we are working together, and will be deleted afterwards. I will not send any sensitive information by
text message and it is advisable that you don't text any sensitive information to me, either.
- As a paper copy - I take hand written notes during your sessions.
These notes are used to plan your assessment and treatment, and to record the
progress of our work. These notes are
kept secure in a locked filing cabinet. The score sheets and results of any
questionnaires you complete over the course of our work together will also be
kept with these paper notes.
I will keep the personal information you provide for as long as it is reasonable and necessary for the purpose of processing (ICO regulations) and in line with professional guidelines. For clients under the age of 18, notes are kept until their 26th birthday, or until seven years after our final contact – whichever comes later – after which I will delete electronic records and destroy paper records.
7. How can I see all the information you have about me?
You can make a Subject Access Request (SAR) by contacting me, as Data Protection Officer. If you wish to have your information corrected, you must provide me with the correct data and I will confirm the data changes as soon as they have been made. Please be aware that as a parent, if your child is aged 13 or over you will only be able to see data about your child if they have given their consent.
8. Complaints or queries.
I aim to meet the highest standards when collecting and using personal information. Please let me know if you have any concerns about the way I collect or use information, so I can look into it and make any necessary changes or improvements. If you wish to escalate a concern, you have the right to raise your complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk/concerns/.