GDPR & Privacy Notice

GDPR & PRIVACY NOTICE

In 2018, the law changed with regard to how organisations have to protect your ‘data’ (personal details and records) and this is called the General Data Protection Regulation or GDPR. The following summary highlights how GDPR is being implemented by APJ Psychological Consulting Limited, a company which provides psychological services and individuals will be asked to provide personal and sensitive information.

APJ Psychological Consulting and the Hampton Hill Psychology Practice collects necessary data for the purposes of providing you with the contracted service and by engaging with this service, it is understood that you consent to personal data and written, electronic and computer-based records being collected and stored on devices or secure cloud storage services and used for these legitimate professional purposes. Computers, mobile devices and cloud storage are all protected by passwords and Norton 360 protection

This information is likely to include your name, date of birth, address, contact number and email address, GP details and next of kin, as appropriate as well as notes about sessions.

Details of your workplace, funding body or insurer may be required if appropriate. APJ Psychological Consulting Ltd has a legitimate interest and purpose in using any personal data and sensitive information collected to provide contracted psychological services. Information is stored in accordance with current British Psychological Society guidance.

The above data collection and storage requires APJ Psychological Consulting Ltd to be registered with the Information Commissioners Office (ICO). The 'ICO' Register is an online public register of Data Controllers which can be checked.

Clinical or occupational information may be shared with your GP with your consent. However, limited confidentiality applied where there is a risk of harm to yourself and others or information about serious wrongdoing, in which case any appropriate action will be taken in accordance with professional guidance and legal requirements.

You have a right to access the information held about you by direct request or by Subject Access request. Information will be provided as soon as possible and usually within 30 days of your request. Information may be amended or deleted as appropriate at your request or if there is a valid reason such as cancellation or services.

You can complain to Annabel Poate-Joyner and also to a professional regulator such as HCPC or ICO if you feel that APJ Psychological Consulting has not complied with good professional practice or current data protection laws or good professional practice.

Sensitive personal data: Health & Social Care records, therapy records, clinical notes, letters, reports, psychometrics and outcome measures.

If you are referred by your health insurance provider, solicitor, rehabilitation company or other appropriate agency such as the Crown Prosecution Service or the Police, then APJ. Psychological Consulting will also collect and process personal data provided by that organisation and related multi-agencies including basic contact information, referral information, and authorisations.

The above activities require APJ Psychological Consulting to act as a ‘Data Controller’ and be registered with the Information Commissioners Office (ICO). This register is an online public register of Data Controllers and visible for anyone to check.