Who am I?
Dr Catherine Lawrence trading as Adélie Psychology is a Sole Trader providing a range of Clinical Psychology services for children and families including therapy, consultation, training, and clinical supervision.
My ICO Registration Number is: ZA546291
Why do I collect Data?
I will collect data about you if you are a client, service user or supervisee. This includes data about the child who is the focus of the work, parents/carers, siblings and other family members if appropriate and relevant to our work. The nature of my work with you and the information I collect, store, process and share must have a lawful basis. I process data because it is in the legitimate interest as a Registered Psychologist to do so. I need to see and analyse documents containing this information in order to provide professional psychological opinion/consultation, carry out an assessment or provide interventions. As a client my lawful reason for processing special category data is that it is necessary for the purpose of the provision of health or social care or treatment. Another lawful reason for me processing your data is it is my legal obligation. If I am processing special category data about you, this is my second lawful reason to do so. You can find out more about the lawful basis for personal data collection on the ICO website: http://www.ico.org.uk.
How do I Collect Data?
I will use a number of methods to collect data about you to enable me to provide the services you have enquired about or requested from Adélie Psychology, including:
- Website: I will collect personal data and technical data from you when you use my website, including use of the contact us form.
- Telephone: I may telephone you and other people connected to your care to gather information as part of my assessment, intervention, consultation, training and supervision services.
- Text and Email: I may use email to communicate with you and other third-parties connected to your care. I may use text messages for the purposes of communication with you, for example, sending appointment reminders.
- Face to face: When we meet face-to-face and I have contact with other parties connected with your care I take written notes to inform our work.
- Written Communications: I may use other forms of written communication, including letters and email to communicate with you and others connected with your care. I may also ask you to complete forms as part of your assessment, intervention, consultation, training and supervision services.
- Third-party sources: With your consent I may collect personal data about you from third-parties connected with your care, for example, other health and social care providers. I may also use search analytics providers to provide me with personal data about individual’s accessing my website.
What Data do I Gather?
I collect information about you to enable me to work with you safely and effectively in providing the clinical psychology services I offer and also to ensure efficient appointment and payment processes. I will gather personal data about you to enable me to fulfil these service needs, such as:
- Identity data: Personal details including your name, address, date of birth and gender.
- Contact data: Including your postal address, billing address, email address, contact telephone number(s).
- Other data: Including General Practitioner (G.P.) details, health, education and social care agencies (including voluntary and statutory services), details of private health insurance providers (where relevant).
- Financial data: Including payment/transaction information.
- Technical data: As required for accessing and providing information through my website.
The nature of my work with you means that I will also need to gather, store and potentially share sensitive personal data in therapy records (for example, notes, letters, reports, outcome measures/psychometric assessments) about your psychological and physical wellbeing, mental health, relationships, life events, diagnoses, medical conditions, prescribed medications and other forms of treatment and forensic/criminal history. I gather this information as is relevant for the purposes of my agreed work with you and to offer you the services you have sought from me.
To make sure that you are assessed/treated/supervised safely and appropriately, I record your personal information as well as details about all contacts you have with me, such as clinical appointments, supervision sessions, assessment information, letters/reports relating to your care so that I can plan and review your treatment correctly.
I also process data in relation to the legitimate interests of my business including:
- Invoices, receipts, accounts and tax returns.
How do I Use the Data I Collect from You?
I will only collect data from you that is necessary and relevant to offering you the services that you have sought from me, for example, psychological therapy and/or psychological assessment, training, consultation and supervision. Collecting this data helps me to:
- Find out if I am the right service to help you.
- Contact you to set up assessment, therapy, training, consultation or supervision.
- Conduct a thorough psychological assessment
- Devise and implement a therapeutic intervention/treatment plan.
- Review and plan your psychological care and other services provided to you through clinical supervision.
- Invoice you for services provided.
- Communicate with relevant third-parties to support your treatment and manage risks (where necessary and agreed with you).
How Long Do I Keep Your Data for?
I do not keep information for any longer than necessary.
Administrative data is retained for up to 6 years in line with HMRC guidance. Where it is not necessary to retain the data for 6 years, it is destroyed as soon as possible.
Personal data is retained for the duration of your work with me. If you are over the age of 18 years when we end our work together I will continue to store your data using the methods outlined in this policy for 7 years from the date of my last contact with you in line with BPS Practice Guidelines (August 2017). For service users under the age of 18 years, data is retained until you are 26 years old in line with the BPS Practice Guidelines (August 2017) and the NHS Code of Practice for Records Management. I have the right to retain your data for these periods so that I can respond effectively to any questions or complaints that may later be raised by you and/or your representatives. After these retention periods I will erase (delete) the information I held about you securely.
I will always store and process the information I collect about you securely. Specifically, this includes:
- All electronic information is stored on encrypted devices which are backed up on a secure, GDPR-compliant electronic system.
- Any paper records will be kept secure in a locked filing cabinet with restricted access.
- The email platform I use (Protonmail) is secure and encrypted.
None of your personal information is stored on the Adélie Psychology website (adeliepsychology.co.uk).
In the unlikely event of a data protection breach, I will notify the ICO so that the appropriate procedures can be followed.
Our services are not directed to individuals aged under 16. If you are aged under 16, please get your parent or guardian’s permission before providing us with any personal information. I do not process data from those under 16 without explicit permission from a parent or guardian.
The Adélie Psychology website uses necessary cookies to enable core functionality such as security, network management, and accessibility. You may disable these by changing your browser settings, but this may affect how the website functions.
Cookies by themselves cannot be used to discover the identity of the user. A cookie is a small piece of information which is sent to your browser and stored on your computer’s hard drive to perform functions and enhance your experience when using a website.
I may also use your IP address to help diagnose problems with my server and to administer my website. An IP address is an assigned number that identifies your computer on a network. Your IP address may also be used to gather broad demographic information.
The Adélie Psychology website contains links to third-party websites and information. Clicking on those links may enable other third-party organisations to gather personal data about you. I do not control these third-party websites and am not responsible for their privacy policies and how they use your personal data once you have chosen to visit their website.
It is important that the information, including personal data (for example, name, contact details, other professionals involved) and sensitive personal data I hold about you is accurate. During the course of your work with me, if your personal data changes, please notify me at the earliest opportunity to enable me to update your information to ensure accuracy and that my records are up-to-date. This is necessary for both data protection and safety/safeguarding purposes.
Sharing and Disclosing Data
Your information is kept confidential wherever possible. In most circumstances I will not disclose personal data without your consent. If I do need to share your information I will always try and ask your permission for this. I may not be able to ask for permission under special circumstances where I am professionally and/or legally required to do so.
If I believe you or others are at serious risk of harm, either from yourself or others, or if you are at risk of harming others, I will share your information with an appropriate professional (for example, Social Care, G.P., Mental Health Service, Emergency/Crisis Services).
Similarly, if I become aware of an intent to cause harm to an organisation (for example, terrorism), the law may require that I inform an authority without seeking your permission. In such a situation the law may require that I share your personal information without your knowledge.
Your information may be shared with outside organisations if they are directly involved with your care/case (for example, a Local Authority funding your therapy, a G.P. or Paediatrician overseeing the medical care of your child). I would discuss with you who I am sharing your information with and what details I would share with them.
As part of on-going professional practice I have regular clinical supervision where I discuss and explore the therapeutic work I am undertaking. This may occur through verbal discussion or the showing of recorded sessions (when consent for this has been obtained from you). In order to protect your privacy, my supervisor, a Registered Clinical Psychologist, will not know you personally or professionally.
If you are a supervisee I will collect sensitive data related to your psychological practice. This data may be shared with a third party if I am legally or ethically obliged to do so (for example, if there are concerns of malpractice and I need to report these to a professional body).
When investigating a complaint, I may need to share personal information with other relevant bodies.
I am fully committed to protecting your rights to privacy. Under the Data Protection Act and General Data Protection Regulations (GDPR), you have certain rights in relation to the personal data collected, stored, processed and shared about you, including the rights to:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to processing of your personal data.
- Request restriction of processing of your personal data.
- Request transfer of your personal data.
- Right to withdraw consent.
If you wish to exercise any of these rights, please contact me via email on email@example.com.
Accessing Your Information
All individuals I collect, store, and process personal information about as a client/user of my services are entitled to:
- Ask what information I hold about them and why.
- Ask how to gain access to this information.
- Be informed about how it is kept up-to-date.
- Be informed about how I meet data protection regulations.
If you would like to find out what data is held about you and how it is used you have a right of access and can make a subject access request. Subject access requests can be made verbally or in writing to me as the Data Controller. I will aim to respond to your subject access request within one month of receiving it. In certain circumstances I may need extra time to consider your request and it can take up to an extra two months. If this is the case I will let you know within one month that it needs more time and why. I will always verify the identity of anyone making a subject access request before disclosing any data.
Complaints or Queries
I make every effort to meet the highest standards when collecting and using your personal information. If you have questions or concerns about how your information is handled, please email me at firstname.lastname@example.org
If you are not satisfied with the response from me or believe I am not processing your data in accordance with the law you have the right to raise your complaint with the Information Commissioner’s Office (ICO):
Helpline: 0303 123 1113