During any direct contact with Dr Amy D’Sa Therapy and Meditation Services (i.e. signing up for the mailing list to accessing services), information will be collected about you. This information explains how this works and your rights in relation to this process. This includes your right to know what information is held, how data about you is used and processed and what restrictions you may wish to place on your data.
Data that is collected
Data collected can include; names, age/date of birth, gender, contact details such as phone numbers, addresses and emails. You may provide additional information about people or professionals involved in your life and information related to your health and wellbeing. This could include but is not limited to areas such as lifestyle or social circumstance, racial or ethnic origin, sexual orientation, political opinions, religious or philosophical beliefs.
During a consultation call, filling in forms, an assessment or treatment, information you will share sensitive information with Dr Amy D’Sa Therapy and Meditation Services. This information is kept confidential and is stored safely.
Personal data that relates to you will only be shared with your awareness and consent with other appropriate professionals if this is necessary and appropriate. This could include information sharing with the GP, mental health professionals, social care, family members, legal teams or medical insurance companies. Information may also be shared with the GP, mental health services (e.g. crisis mental health teams) social care or emergency services (i.e. police) if you share information that indicates a risk of harm to yourself or another. This will also be transparent and shared with you but may occur without your consent.
When you provide information about yourself, Dr Amy D’Sa Therapy and Meditation Services “controls” the processing of this data. Your data is used to support your journey into and out of the service, from the point of an inquiry through to treatment and also if there is a complaint.
Data retention
Following the end of treatment/intervention with Dr Amy D’Sa Therapy and Meditation Services, your data is stored securely for a further 7 years before it is destroyed. This is required by professional liability and insurance terms and conditions. For interventions of individuals under 18, it is recommended records are kept for 7 years after the client has become 18 years old.
Data held by Dr Amy D’Sa Therapy and Meditation Services is kept securely. Manual data is locked away in a secure filing cabinet. Any date held electronically is encrypted and GDPR compliant as well as being password protected if they are stored on hard drives or on Microsoft Cloud based systems.
If you contact Dr Amy D’Sa Therapy and Meditation Services for a consultation call but this does not move into any assessment or treatment phase or therapy agreements, the data is held for 18 months before being deleted.
If a complaint is made data is retained for a longer period of 10 years.
If there is an active investigation or legal actions, including those that could result in a criminal prosecution, it is likely you or law enforcement agencies will be in touch. In these cases, data retention will comply with legal requirements. This may include holding on to data for a longer period.
Your rights
You have legal rights to understand why data is collected about you, how it is held and used, who it is shared with and that inaccurate data can be amended. You also that the right to request copies of your data, to restrict how it is processed or ask for the deletion of your personal data.
These rights are known as Individual Rights under the Data Protection Act 2018. The following list details these rights:
- The right to be informed about the personal data being processed;
- The right of access to your personal data;
- The right to object to the processing of your personal data;
- The right to restrict the processing of your personal data;
- The right to rectification of your personal data;
- The right to erasure of your personal data;
- The right to data portability (to receive an electronic copy of your personal data);
- Rights relating to automated decision making including profiling.
These rights can be exercised at any time and will not be charged. However, a charge to cover reasonable administration time for requests will be expected if requests for personal data are excessive and repetitive.
It is important to be aware that in some situations it may not be possible to fully meet a request related to your data. For example, if data is needed to be retained for statutory or regularity purposes, it would not be possible to process a request for the data to be deleted. Additionally, if there is a context which is understood to or vital or public interest, it is a requirement of law that your information is available for law enforcement or other legal services involved in the matter.
Protecting your data
Dr Amy D’Sa Therapy and Meditation Services take all necessary steps to protect your data. Encryption is used with communication and email services to you and third parties. Sensitive information is also not sent unless anonymised or encrypted. Data held on a mobile (e.g. phone numbers) is protected with a secure pin. Phone numbers are only stored whilst treatment is active. In clinical supervision, information is provided using initials only. We will share your information in an emergency that would protect your vital interests. If there is a breach we inform you and the ICO within 72 hours.
Complaints
If you are dissatisfied with any aspect of the way in which we process your personal data please contact us. You also have the right to complain to the UK’s data protection supervisory authority, the Information Commissioner’s Office (ICO). The ICO may be contacted via its website, by live chat or by calling their helpline on 0303 123 1113.
Contact us
If you have any questions regarding this privacy policy, the use of your data and your Individual Rights please contact us directly.
dramydsa.com 