Introduction

I understand how important your privacy is. I take care to protect your privacy, including your confidential information, in accordance with the professional codes of ethics of the UKCP and BACP, and it is my policy to comply with all applicable privacy laws, including the UK GDPR.

In order for me to carry out my services as a therapist I will retain your personal contact details and brief records of your therapy sessions. Please find below how this information is stored and used, and details about the limited circumstances in which this information may be shared with third parties.

What information I collect, use and why

To provide therapy services for my clients I will collect and use information such as:

• Name, address and contact details

• Gender

• Pronoun preferences

• Date of birth

• Health information (including medical conditions, some medications and mental health diagnoses and/or treatment.

I may also make note of so-called ‘special category data’ in the course of our sessions together, such as:

• Racial or ethnic origin

• Religious or philosophical beliefs

• Health information

• Sex life information

• Sexual orientation information

Lawful bases and data protection rights

Under UK data protection law, I must have a “lawful basis” for collecting and using your personal information. A list of lawful bases is set out in the UK GDPR, and you can learn more about lawful bases on the ICO’s website.

When processing personal information in the course of providing my services, I will normally do so on the basis of legitimate interests. Sometimes I need to process special category data, as outlined above. Such data will be processed either with your explicit consent or as needed for purposes of establishing or defending any legal claims. 

How your information is used

I will use your information to deliver therapy services, including for purposes of billing and payment. All personal information is stored securely. Client information is retained for a period of seven years after your sessions with me have concluded, as required by my legal and compliance obligations. Thereafter, they will be securely destroyed. 

The information you provide to me is confidential and, as such, in the normal course of business I will not share your information with any third party other than my supervisor (as explained in my client agreement), in which case the information shared has any identifying information removed.

In very rare circumstances, I may be obliged to share your personal information with other health providers (e.g., a doctor) or law enforcement. However, I will never pass on your contact details or personal information to any third party or organisation for the purposes of sales, marketing or research. 

Contacts

If you have any questions or concerns about the use of your personal data, please contact me at sarah@sarahrobertsontherapy.co.uk.

I am registered with the Information Commissioner’s Office (ZB300224) and any information that I keep is subject to the Data Protection Act 2018 (DPA 18) and United Kingdom General Data Protection Regulation UK-GDPR.