Protecting your privacy.

Your privacy is very important to me, and I am fully committed to adhering to the General Data Protection Regulation (GDPR) to ensure your data is handled responsibly and securely.

I process personal data because I have a legitimate interest in doing so to provide psychological services. This statement explains what personal information I collect, why it's collected, how long it's retained, and your rights regarding your data. I am registered with the Information Commissioner’s Office (ICO).

When you are referred or refer yourself for psychological services, you will be asked to consent to the processing of your data in line with this policy. I will be the one responsible for managing your data, and I will follow this privacy statement and maintain a separate privacy policy that complies with GDPR standards.

Personal information I collect:

I collect personal data such as name, address, date of birth, GP/medical practitioner details, telephone numbers, and email address. I also collect any data that you give me regarding personal and family background, brief session notes, alongside potentially sensitive data relating to medical and mental health conditions.

What do I use your information for?

I use your information in the following ways:

• To provide clients with psychological services requested.

• To notify you about changes to your appointments.

• To fulfil any administrative, legal, ethical and contractual obligations.

What information do I share?

I will not share any information about you with other organisations or people, except in the following situations:

• Consent – I may share information with relevant medical professionals or others whom you have requested or agreed we need to contact.

• Serious harm – I may share your information with the relevant authorities if I have reason to believe that this may prevent serious harm being caused to you or another person.

• Compliance with law – I may share information when the law requires me to – i.e. safeguarding, terrorism, drug trafficking and serious crime.

• Supervision– It is an ethical requirement for any clinician offering psychological services to have regular supervision. Any supervisor used is an accredited member of the relevant accrediting body and works within their ethical framework. No information is divulged to identify the client.

How do I keep your information safe?

All information you provide to me is stored as securely as possible. I will take all reasonable precautions to prevent the loss, misuse or alteration of information given.

• All paper forms and correspondence are kept in locked filing cabinets.

• Formal reports are password protected.

• Whilst I endeavour to keep my systems and communications protected against viruses and other harmful effects, I cannot bear responsibility for all communications being virus free.

• Client notes and other documentation are destroyed seven years after the end of the psychological services offered.

• Any known data breaches will be reported to the ICO within 72 hours.

• Any requests for personal data need to be made through a data subject access request and will be supplied within one month.

Your rights

Under the GDPR, you have the right to:

Access your personal data – Rectify, erase or restrict your data – Object to the processing of your data – Request transfer of data (data portability).

You may withdraw your consent for me to hold and process your data at any time. However, if you do this while actively receiving psychological services, the services would have to end. You can withdraw your consent by stating this on an email to info@drelizabethbalsys.co.uk

If you would like to contact me to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to info@drelizabethbalsys.co.uk.

If you have any concerns about the way I handle your data please contact info@drelizabethbalsys.co.uk If you feel this has not been resolved effectively you have the right to contact the Information Commissioners Office (www.ico.org.uk)