Dr Emma Bacon
Dr Emma Bacon, Clinical Psychologist provides psychological assessment and therapy. To work effectively we need to collect, store and share clients’ personal information, some of which may be sensitive. We respect clients’ right to privacy and aim to provide clear information about our data processing policy, as required under General Data Protection Regulations (GDPR). Please contact us on 07377 866033 or [email protected] if you would like any further information or have any queries about how we use clients’ data.
Dr Emma Bacon is registered as the Data Controller with the Information Commissioner’s Office (registration reference ZA301971).
This Privacy Notice is designed to help clients understand what we do with their personal data - why and how we collect, store, share and delete it.
What information is being collected?
We collect personal information about clients, such as name, date of birth and contact details. Some of the information will collect is ‘sensitive’, as it may include racial or ethnic origin, religious or philosophical beliefs, genetic data, data concerning health, sex life or sexual orientation, or criminal offences.
We may also collect information about other services clients receive, for instance GP details.
Who is collecting it?
Dr Emma Bacon is the data controller. This means she collects, securely stores, shares and deletes data as appropriate and to meet current legal and professional requirements.
How is it collected?
Information may be provided by:
- referrers e.g. GPs
- other individuals or organisations e.g. health services
Information may be verbal (e.g. from face-to-face meetings, telephone conversations) or written (e.g. from health reports, letters, e-mails, website contact page).
Clients will often have consented to their personal data being transferred to us. If so, they are free to withdraw this consent at any time, by contacting Dr Bacon on 07377 866033 or [email protected]
Why is it being collected?
The data are collected for several purposes, including so that we can:
- contact clients when necessary
- provide effective psychological services, for example, so that assessments we carry out are accurate and fully-informed.
- share information with other organisations or individuals, if appropriate and necessary.
- evaluate and monitor our services.
- carry out necessary business and administrative tasks.
Our lawful basis for processing clients’ data is that it is in our legitimate interests as a Clinical Psychologist to do so, as we need to see and use this data to provide effective psychological services. A lawful basis for some data processes is also to fulfil a contract with the client.
We process special category data (such as health information) under the condition that this is necessary for the provision of health or social care or treatment.
How will it be used?
Information is stored with the utmost regard to client privacy. Personal information including sensitive data will be held:
- as hard copies (ie. on paper), in locked secure storage with restricted access. If files need to be moved (e.g. from administrative base for use at therapeutic setting) this will be done with utmost consideration of data protection and client confidentiality.
- electronically with suitable protection to ensure confidentiality, including password protection and encryption where appropriate.
Data will be used for the provision and evaluation of psychological services. This may include writing reports and clinical letters, carrying out assessments and questionnaires and internal service audit.
Who will it be shared with?
Data will only be shared on a need-to-know basis, at the minimum level required, to provide effective psychological services as outlined above. It may sometimes be appropriate to share information about assessment or therapy with other people, for instance family members or other professionals or organisations involved in a client’s care. This will usually be done with the client’s consent and with the understanding that such disclosure is for the client’s benefit.
Occasionally it may be necessary to share information with relevant authorities or organisations without the client’s consent, to ensure safety and comply with legal requirements and professional obligations. We will usually try to inform clients if this is necessary (unless to do so would involve further potential risk).
How long will it be kept for?
Information will be kept for as long as necessary for the provision of psychological services.
After discharge, it will be necessary to keep some client information, to meet legal requirements. This is likely to include referral information and assessment/therapy case files. Client information will be kept for 7 years (adult clients) or until the ex-client becomes 26 years old (child clients).
Information will be destroyed as soon as it is no longer needed. For hard copies this will be done through confidential shredding, by an approved organisation.
What will be the effect of this on the individuals concerned?
We aim to process data in ways that:
- clients would reasonably expect, so that we can provide effective psychology services.
- do not cause unwarranted concern, harm or detriment to the client.
Concerns and complaints about data protection
If you have any concerns about how we process your personal data, please contact us in the first instance to see if the issue can be resolved.
You have a right to make a complaint to the Information Commissioner’s Office, by contacting their helpline on 0303 123 1113 or writing to them at 45 Melville Street, Edinburgh, Scotland, EH3 HL.
Dr Emma Bacon