Privacy Policy

Please note that prior to commencing therapy you will be sent a Privacy Agreement and will be requested to sign. 

The type of information I collect 

I currently collect and process the following personal information;

- Name

- Gender

- Date of Birth

- Address

- Contact Details

- Next of Kin and their contact details

- GP Details

- NHS Number

Additionally for clients under 18

- Who has parental responsibility over you

- Their Address 

- Their Contact Details

How and why do I collect information about you? 

Personal information with be collected from you directly or, for those under 18, from their parent/carer. I take and hold this information for the following reasons; 

- To be able to contact you for sessions and send any resources

- To ensure you are safeguarded

- To guide treatment and where necessary/appropriate transfer care to another health provider 

I may share this information with other agencies/health providers (such as GP, Police, Local Children’s Services, Local Adult Social Services) under the following circumstances:

- When there is a significant risk of harm to you or someone else.

- When there is a disclosure of a crime.

- When I am bound by law to do so. 

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

A.) Your consent. You are able to remove you consent at any time, you can do this by contacting rlabrumcbt@outlook.com 

How I store your personal information

Your personal information is securely stored via Write Upp (a GDPR compliant secure medical software vendor) which is password protected and only accessible by myself. Write Upp’s Privacy Agreement can be provided upon request.

Therapy Contracts, signed Privacy Notices and any returned forms/information via email will be stored on a password protected laptop which only I have access to and is only used for work purposes. Information will be retained for 6 months after the completion of work and then will be permanently deleted or if requested by the client. 

Rebecca Labrum CBT, is registered with the Information Commissioners Office (ICO). ICO is the Government office responsible for the enforcement of the Data Protection Act 1998 and its successor GDPR - my reference is ZB364961.

Your data protection rights

Under data protection law, you have rights including:

- Your right of access - You have the right to ask us for copies of your personal information. This can be done via a Subject Access Request (SAR) under Article 15 of the General Data Protection Regulation, details on how to do this can be found; https://ico.org.uk/your-data-matters/your-right-to-get-copies-of-your-data/

- Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

- Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

- Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

- Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

- Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

- You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

How to complain

If you have any concerns about my use of your personal information, you can make a complaint to rlabrumcbt@outlook.com

You can also complain to the ICO if you are unhappy with how I have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113