Privacy Policy

PRIVACY GDPR POLICY

Jenny Kavanagh psychotherapy Privacy Policy (last updated 12/10/18)

Jenny Kavanagh Psychotherapist is committed to protecting the privacy of information provided by clients. Jenny Kavanagh, is registered with the Information Commissioner’s Office (ICO) as a Data Controller.
This privacy notice provides you with details of how I collect and process your personal data.

Collection of Personal Information
Information about your child may be collected via spoken or written information from parents/carers. With parental consent, information may also be collected from other professionals working with your child (such as teachers, nursery staff, childminders, NHS Speech and Language Therapist).

Use of personal information
Personal information collected by me via email, telephone or face to face, correspondence, is stored and used by me for the purpose of delivering your child’s psychotherapy sessions.
Any sensitive personal details are stored in a secure and confidential system and processed in confidence by Jenny Kavanagh Art Psychotherapist and shall only be used for the purposes of delivering appropriate psychotherapy sessions.
With your consent, information about your child’s emotional and well being needs will be shared with other professionals involved in your child’s care, when it is in your child’s best interests. A record of your consent is kept within your child’s case notes.
Unless required to do so by law, I will not disclose any personal information collected to any person other than as set out above.
I do not employ agents to process personal data, for example specialist mailing companies to send out communications.
I do not give or sell client details to any third parties.

How Personal Information Is Used
This information is used:

To prepare, plan and provide creative psychotherapy sessions appropriate for your child’s needs.
To communicate with you via email and telephone in relation to: confirming and preparing for appointments, general communication in between appointments, sending you reports and programs for your child (reports are always password protected), copying you in to communications with other professionals involved with your child (your child’s initials rather than full name will be used in emails), sending you resources and sending you invoices.
Email is not a 100% secure method of communication. With your consent, it will be used for correspondence and to send letters, reports and other documents securely via Keep Safe. For more information about the use of Keep Safe and how it helps secure data sent please refer to https://www.stayprivate.com/about.html.

How Personal Information Is Stored
All information about you, your child and their therapy is stored securely in systems to ensure that I have a complete record of my service to them. As paper based notes are held within a file securely locked behind two lockable facilities left within the school premises.

In accordance with law, all records will be kept securely until your child is 25 years old. After this time all records relating to your child will be destroyed.

Lawful basis for processing personal information

The lawful basis for processing and storing personal information is one of ‘legitimate interest’ (under article 6 of GDPR). I cannot adequately deliver a service to your child without processing their personal information. As it is both a necessity for my service delivery and of benefit to your child, I have a legitimate interest to process and store their data.

Data relating to an individual’s health is classified as ‘Special Category Data’ under section 9 of the GDPR. The regulations specify that health professionals who are “legally bound to professional secrecy” may have a lawful basis for processing this data. Speech and Language Therapists are legally bound to keep client information confidential and it is under this condition that we process and store personal information.

Your rights

Data protection legislation gives you, the parent, various rights. The most important of these are as follows:
You have the right to a copy of information I hold about your child.
You have the right to ask for your record to be amended if you believe that it is wrong.

How To Access Your Child’s Records

You can access the information I hold about you by writing to me at the address given below. Please apply in writing rather than by email, so that I receive an original signature to compare against the records we hold.

A copy of your child’s records is provided free of charge.

I will provide access to your child’s records within 30 days of receipt of all necessary information.

Please make your request in writing to:
Subject Access Requests Specialist 58, Wolverhampton Street Darlaston WS10 8UF

If you have any further questions about how I use your information, please contact This email address is being protected from spambots. You need JavaScript enabled to view it.
Further information about data protection legislation and your rights is available from the Information Commissioner’s Office or by calling 0303 123 1113, 9am to 5pm, Monday to Friday.

Responsibilities

I am committed to maintaining the security and confidentiality of your child’s record. I actively implement security measures to ensure their information is safe, and audit these regularly.

I will not release your personal details to any third party without first seeking your consent, unless this is allowed for or required by law.

I am constantly working to ensure compliance with current data protection regulation. In the unlikely event that you are not satisfied with my service please contact me. I will make every attempt to resolve this through discussion. If it is not possible for us to resolve matters, and you wish to complain formally, please refer to the Health Care Professions Council (HCPC) http://www.hpc-uk.org/complaints/.