Privacy Policy 22/08/22

Dr Emma Arora is registered with the HCPC (Health and Care Professionals Council) and operates under their regulations.  This is a summary outlining how your data (personal details and records) will be processed in line with the General Data Protection Regulation (GDPR) implemented in May 2018 and explaining why confidential information is held and how it is protected.  It is assumed that by engaging with our service you are consenting to records being kept. 

The type of personal information we collect:

·      Your initial registration form including personal details (name, contact details) when you make contact to arrange appointments

·      If you wish to proceed with therapy your full name, DOB, address, GP details, emergency contact details and other relevant contact details

·      Questionnaires as indicated and with your consent

·      Brief session notes to facilitate effective treatment and in accordance with HCPC and GDPR requirements

How we get your personal information and why we collect it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

·      Through the initial contact form on the website

·      During the initial assessment and therapy sessions

We use the information that you have given us in order to make contact with you, to book the initial session and facilitate ongoing sessions.  A minimal amount of information and brief session notes are required to promote safe and effective treatment as required by the HCPC and GDPR.

Confidentiality and information sharing

Confidentiality is maintained all times unless there are exceptional circumstances (e.g. risk of harm to yourself or others) in which we may share information with other agencies (e.g. GP, mental health team, police).  In instances of significant risk it is possible to do so without your consent but where possible this would be discussed with you first.

You will not be emailed with marketing information and your personal information will not be passed on to other third-party organisations other than outline above.

How we store your personal information

The security of your personal information is paramount.  Your information is securely stored on a password protected computer.  Any handwritten documentation will be stored in a locked filing cabinet.  Any correspondence by email will be regularly deleted.

We will keep your records for a period of 7 years in accordance with current professional guidance after which time they will be destroyed/deleted.

Your data protection rights

Under data protection law, you have rights including:

The right to ask us for copies of your personal information. Please discuss with Dr Emma Arora if you would like to make a subject access request (SAR), she may need to discuss with the HCPC.

Requests for information to be modified or deleted would also need to be discussed with Dr Emma Arora and in correspondence with the HCPC.

When you finish your sessions no further notes will be taken.

Any requests will be responded to within one month.

How to complain

We hope we would be able to resolve any queries or concerns about your personal data directly.  However if not, you have the right to complain to the UK Information Commissioners Office (ICO) on 0303 123 1113

ICO website: https://www.ico.org.uk