We understand that by choosing to use our services you have placed a great deal of trust in us. At Dr Adrian Edwards Clinical Psychology (AECP), we also recognise that you want any personal information that you share with us to be kept private and to be looked after securely. We are committed to protecting the privacy of all personal information obtained from you during your visits to this website and any contact that you have with the clinic.
1. What are your rights?
We are committed to protecting your rights to privacy. They include:
• Right to be informed about what we do with your personal data
• Right to have a copy of all the personal information we process about you
• Right to rectification of any inaccurate data we process, and to add to the information we hold about you if it is incomplete
• Right to be forgotten and your personal data destroyed
• Right to restrict the processing of your personal data
• Right to object to the processing we carry out based on our legitimate interest
2. Why do we collect at information about you?
We may collect information about you because you are a patient or client of ours.
We process the data because it is in our legitimate interests as a clinical psychologist to do so. We need to see and analyse documents containing this information in order to provide advice, to carry out an assessment or to deliver psychological intervention.
As a client or patient of AECP our lawful reason for processing “special category data” is that it is necessary for the purposes of the provision of health or social care or treatment.
3. What information do we collect about you?
We collect information about you that may include personal or sensitive information, such as:
· First name or given name
· Family name or surname
· Telephone numbers
· Date of birth
· Gender (or preferred identity).
· Date of Birth.
· Relationships & children
· Telephone/SMS number
· Email address
To make sure that you are assessed and/or treated safely and appropriately, we record your personal information, such as your name, address, as well as all contacts you have with us such as appointments and the results of assessments and letters relating to your care/report. Your data is kept confidential within AECP at all times and is only shared with personnel when they need it to carry out their job.
We also process personal data pursuant to our legitimate interests in running our business such as:
• Invoices and receipts
• Accounts, VAT and tax returns
When you are a patient or client of AECP we record all your treatment and details of your appointment so that your clinician can plan your treatment correctly. In addition to the personal information above, we may also collect information regarding:
· Medical conditions (if relevant)
· Prescribed medication.
· Psychological history and current difficulties.
· Offences (including alleged offences)
· Financial information, including bank account details (if you are a private patient/client)
We may collect some of this information from your insurance company if you have one, and some of this information will be collected directly from you.
Web access collection of Information
We collect information about you when you register with us or place any order for services. We also collect information when you voluntarily complete contact forms. However, in this case they will be unable to engage in the particular website activity as we would not have the contact details to send the requested information. AECP always tries to minimise the amount of personal information that we require in order to provide a specific service or feature.
AECP keeps confidential records and statistics about its clients. All records are kept securely and are only seen by authorised AECP personnel.
AECP recognises that on rare occasions our clients may wish to exercise their rights under the General Data Protection Regulation May 2018 and make a subject access request in respect of their personal information held by AECP. Often during therapy, information is provided by more than one individual. In these cases, AECP will only release information if consent has been given by all of the individuals involved. If at any time you wish to exercise your right under the Act you should put your request in writing to Dr Adrian Edwards, and provide evidence of your identity such as a copy of your passport or driver’s licence and proof of your address. When the Service Manger receives your written request, and evidence of identity they will respond to your request within 40 calendar days. AECP’s response to a valid subject access request will normally be in the form of a schedule listing and describing the personal data we hold on them.
4. How and when we may share your personal information
We will keep your information confidential and will not share any written information with anybody, including your child’s GP, without your permission. However, if your GP or another professional referred your child, at minimum we would need to write to them to let them know we have seen your child, and whether we are going to continue to treat her/him.
The exceptions to the above rule would be:
- Risk of harm: If we perceived that the child, or someone else, was at risk of harm. If we needed to breach confidentiality for any reason (and this is very rare) we would always discuss this with you first unless in an emergency situation e.g. we felt the child to be in immediate danger
- To comply with applicable laws; respond to governmental enquiries (or enquiries from a legal, governmental or quasi-governmental or local authority agency); comply with a valid legal process or procedure; or protect our rights or property
5. How do we store and keep secure personal information?
Security is of crucial concern to AECP.
We are committed to taking reasonable steps to protect any individual identifying information that you provide to us. Once we receive your data, we make best efforts to ensure its security on our systems.
All personal information provided is stored in compliance with EU General Data Protection Regulations (GDPR) rules.
We will store the information provided through the website at least for the duration of any customer relationship we have with you, or as otherwise required by law (normally up to a maximum of 7 years for legal and tax reasons). We use additional security procedures to keep your information secure by taking appropriate technical and organisational measures against its unauthorised or unlawful processing and against its accidental loss, destruction or damage. Regarding information transmitted between the Website and and/or users, while we take reasonable precautions to safeguard this information, we may be unable to prevent unauthorised access to such information by third parties or inadvertent disclosure of such information during transit. Users acknowledge this risk when communicating with the Website. Please remember that normal Internet email is insecure. It is also important for you to protect yourself against unauthorised access to your password and to your computer. Be sure to sign off (log-out) when using a shared computer.
Your therapist at AECP may hold a work mobile phone which will be used as a communication method between you. This will mean that the mobile phone will hold your name (as initials) and your phone number for correspondence. Any phone or text messages will not be held on the mobile phone.
6. Obtaining Further Information