PRIVACY NOTICE
This privacy notice explains how I look after your child(ren)’s personal information. Please read it so that you are aware of how and why I use personal information. If you have any questions about this notice please contact me using the details below:
Name: Dr Lorraine Walker (Registered Data Controller)
Phone Number: 07966 666 371 or E-mail:
My Commitment
Although I collect and hold certain personal data I am committed to protecting and respecting my clients’ privacy. This privacy notice provides an overview of how I comply with data protection legislation and the basis on which any personal data I collect during the course of our work will be processed. General Data Protection Regulation (GDPR) stipulates that I must have a lawful and legitimate basis for collecting and retaining this information. The lawful and legitimate basis for my doing so it to respond to any enquiries from you and/or our arrangement, with your explicit consent, to provide a clinical service to your child(ren), while complying with my legal and regulatory obligations as an independent Clinical Psychologist.
The type of personal information I collect
I collect and process the following:
- Personal identifiers, contacts and characteristics (e.g. names, dates of birth, telephone number, email address, home address, your signature on documents)
- Records of appointments, text messages, voicemails and emails and invoicing and payment details.
- Sensitive data generated in the course of therapy including clinical notes, questionnaires and standardised assessment responses/results, details of professionals working with you and correspondence related to your child(ren)’s health, education and care (such as reports and referrals).
How I get the personal information and why I have it
Most of the personal information I process is provided directly by you in order to:
- respond to an enquiry or request you’ve made
- obtain consent to deliver a service to your child(ren) and arrange the delivery of a clinical service for your child(ren)
- record the details of clinical services provided to your child(ren)
- liaise with other professionals involved in your child(ren)’s care- with your consent
- arrange payment for services provided and manage accounting practices lawfully
- comply with good practice guidelines and work within legal parameters.
I also receive personal information from other professionals working with you (e.g. referrals, telephone calls, emails, minutes of meetings, care notes, care plans and professional reports)
In the course of our work I may share personal information with professionals working with your child(ren), with your consent, so that a comprehensive package of care can be delivered to your child(ren) and/or appropriate referrals on are made, as required. In certain circumstances, if I have concerns about the safety of your child(ren) and/or the safety of others I have a legal duty to share information with other parties such as your child(ren)’s GP, Children’s Social Care or the Police. I would aim to discuss this with you before sharing information, unless doing so would increase any risk to your child(ren) and/or others. I would also be obliged to share personal information if this was Court ordered or should a professional indemnity or data protection issue rise. In addition, all psychologists undergo regular formal clinical supervision. Personal details related to clinical practice with our clients are shared during supervision in order to support clinical practice. Our supervisors uphold the same standards of practice with regard to respecting and protecting privacy.
You can withdraw your consent for your child(ren)’s data being processed at any time by contacting:
How I store your personal information and the retention period
Although I collect and hold personal data in order to deliver professional services to your child(ren), I am committed to protecting and respecting your privacy and keeping your child(ren)’s data secure. My IT systems and administrative processes are set up to prevent unauthorised access or disclosure of your child(ren)’s data. Handwritten notes made during therapy/professional meetings are shredded following the creation of an electronic record. Electronic records of the contact are stored on a secure practice management system.
Reports and other documents sent to you and those working with you are password protected. I use your child(ren)’s first name only in email correspondence with you and their initials only in email correspondence with professionals; including when preparing and sending invoices. Electronic invoices are retained for seven years in compliance with HMRC regulations. Invoicing details are provided to my accountancy service for accounting purposes.
I keep records of your child(ren)’s contact with the service for as long as is it needed to provide a psychological service to them and in accordance with the legal and good practice guidance. My access and retention practices are informed by the Access to Health Records Act (1990) and the NHS’ standards of good practice: https://digital.nhs.uk/data-and-information/looking-after-information/data-security-and-information-governance. Health records for children and young people are retained until they are 25 years old or 26 years old if their treatment ends when they are 17 years old. Personal information from those enquiring about a service, but who do not go on to receive a service, is retained for six months after the initial enquiry. Personal information is disposed of by deleting all electronic records.
Your data protection rights
Under GDPR law, you have rights including:
- The right of access - You have the right to ask me for copies of personal information. This right may be restricted by my need to comply with the Access to Health Records Act (1990). I can explain these restrictions to you as required.
- The right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
- The right to erasure - You have the right to ask me to erase personal information in certain circumstances. This right may be restricted by my need to comply with professional or legal regulations or other legitimate reasons for me to retain data. I will inform you if this is the case.
- The right to restriction of processing - You have the right to ask me to restrict the processing of personal information in certain circumstances.
- The right to object to processing - You have the the right to object to the processing of personal information in certain circumstances.
- The right to data portability - You have the right to ask that I transfer the personal information given to another organisation, or to you, in certain circumstances.
You will be required to put any request in writing and to verify your identity in order to process a request. Please contact me at:
How to complain
If you have any questions or concerns about the use of your personal data please contact me at
Information Commissioners Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
