How I get your personal information and why I have it
The personal information I process is provided to me directly by you for one of the following reasons:
Working with me for coaching and/or RTT
Queries and expressions of interest about working with me for coaching and/or RTT
Working together for any other reason
The type of personal information I collect
For clients and prospective clients, I currently collect and process the following information:
Name, occupation and age – this is basic information that helps me get to know you.
The contact details you provide – I use this as a way of contacting you regarding your sessions. I will mainly use the method you first contacted me by but if I cannot reach you, I will try a different method.
(For RTT clients only) next of kin/medical professional’s details – If I was worried that you were at risk, I may need to contact your next of kin or medical professional, if I can. I will let you know when/if I am going to do this.
(For RTT clients only) relevant health information - this information helps me to best understand your needs.
Session notes – I keep brief notes of session(s) for reference for seven years, the time required by my insurer.
Under the UK General Data Protection Regulation (GDPR), the lawful bases I rely on for processing this information are:
(a) Your consent. You are able to remove your consent at any time. You can do this by contacting me via the email address or contact form link provided above.
(b) A contractual obligation.
(c) A legal obligation.
(d) A legitimate interest.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask me for copies of your personal information.
Your right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
Your right to erasure - You have the right to ask me to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask me to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.
Please contact me via the details provided above if you wish to make a request.
How your personal information is stored
The information I gather from you is securely stored online through my domain. Only I have access to this information. If you are a client, I will keep your details and session notes for the time required by my insurer (currently 7 years). If you have shared your details with me by contacting me, I will keep these details only for as long as necessary for the purposes for which you have shared this data. I will then ensure all of your data is deleted.
Circumstances under which your data may be shared
It is very unlikely that I will share your data. I will not sell it on or use it for unethical reasons. I may have to share it if my notes are subpoenaed by court. If you or anyone you tell me about is at harm or risk of harm I may have to pass this information on. I may also discuss your case during training or other professional development supervision but I will not disclose any personal or contact details.
How to complain
If you have any concerns about use of your personal information, you can make a complaint to me directly via the contact details provided above.
You can also complain to the Information Commissioner's Office (ICO) if you are unhappy with how your data has been used.
The ICO’s address:
Information Commissioner’s Office
Helpline number: +44 303 123 1113
ICO website: https://www.ico.org.uk