Privacy Policy

This document sets out how The Huddle Clinical Psychology collects, stores and processes your data. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

In addition to general GDPR compliance, all clinical psychologists are required to uphold strict requirements on how they collect, store and use other people’s data. These requirements are overseen by the UK supervisory authority for data protection issues, the Information Commissioner’s Office (ICO).

 

Controller & contact details

Dr Kate Nurser is the data controller and is responsible for your personal data (referred to as “The Huddle Clinical Psychology”, “Dr Nurser”, “we”, “us”, or “our” in this privacy policy). If you have any questions about the policy or our privacy practices, please contact Dr Nurser on: hello@the-huddle.uk.

 

What data is collected and processed?

• Personal data: basic contact information – e.g. name, address, telephone number, GP details.

• Sensitive personal data: therapy contract, therapy records (including notes, letters, reports, outcome measures).

• Electronic data: If you email, Dr Nurser will collect any information you provided, and your email address.

 

The lawful basis for processing personal data

The Huddle Clinical Psychology has a legitimate interest for processing your personal and sensitive data. This information is needed in order to provide psychological therapy to you.

 

How your personal data is used:

Your data is used to:

• provide a psychological therapy service to you

• process payment for services

• send email/SMS reminders of appointments

• contact you for other purposes.

 

How personal information is shared

The Huddle Clinical Psychology does not normally share information about clients with any third party. Therapy is a confidential process and you should feel confident that your information will not be shared.

 

There are some specific exceptions to this:

• Health Insurance companies will require appointment schedules for the purposes of billing, and may require treatment updates.

• When there is need-to-know information for another health provider, e.g. your GP.

• When disclosure is in the public interest, or where there is a legal duty.

• When there are concerns about risk of harm to yourself or to another. We will discuss such a proposed disclosure with you unless we believe that doing so could increase the level of risk to you or someone else.

 

Keeping your personal information secure

The email account is monitored by Dr Nurser only. Personal information is minimised in emails and phone communication. Emails do not use encryption services, and are sent as normal.

 

The Huddle Clinical Psychology does not use open or unsecured Wi-Fi networks to send any personal information.

 

The Huddle Clinical Psychology keeps electronic notes for the purposes of providing therapy. If paper notes need to be made they are stored in a locked metal filing cabinet. Electronic notes and electronic databases are stored on a cloud service which is password protected.

 

Mobile devices are protected with a passcode/thumbprint.

 

Any letters sent to you, your GP, health insurance companies or any other third party, will be sent with your consent. Letters will be sent by post or password protected in an e mail.

 

Any updates to health insurance companies will follow their security protocol.

 

How long is your information kept?

The Huddle Clinical Psychology will hold records for 7 years following the date of the last contact, following which records will be destroyed.

 

Your legal rights
Under UK GDPR, you have the right to:
• Request access to your personal data
• Request correction of inaccurate data (though we may need to verify the accuracy of the new data you provide to us)
• Request erasure (where applicable)
• Restrict or object to processing
• Data portability
• Withdraw consent (where consent is the lawful basis)

 

If you wish to exercise any of the rights set out above, please contact us. We will try to respond to all legitimate requests within one month. Occasionally it could take longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

 

Complaints
Should you feel the need, you have the right to make a complaint at any time to the ICO. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

 

Changes to This Privacy Policy
This policy may be updated from time to time. The most recent version will be available on request.