Privacy Policy
This document is being provided to you to clearly outline how Dr Sarah Kelly will use and protect your data to ensure full GDPR compliance. Dr Sarah Kelly offers psychological assessment and intervention. Dr Sarah Kelly is fully committed to
protecting and respecting your privacy. It is important you read this document, understand the content, and ask any questions you have.
Why collect personal data?
Dr Sarah Kelly will collect personal data from you if you are a client or patient she is working with. There are lawful reasons to use/process your personal data. Firstly, it is in Dr Sarah Kelly’s legitimate interest as Clinical Psychologist to collect information from you to provide advice and treatment. Secondly, collecting personal information, or “special category data” carries legal obligations that Dr Sarah Kelly is duty bound to fulfill.
What data will be collected?
Dr Sarah Kelly will collect information about you that might include the following:
- Name, gender, address, telephone numbers, email address, next of kin and GP details
- Content of emails, text and telephone messages
- Details of your current difficulties, including all relevant personal, medical, social and contextual historical background information.
- Offences
Information may also be provided to Dr Sarah Kelly from other professionals involved in your care, e.g., Occupational Health providers, insurance companies or legal representatives from whom she has received instruction.
Dr Sarah Kelly will record the above data and details of contacts you have had. For example, appointments booked, appointments attended, assessment and treatment reports. This data will be always kept confidential as much as is reasonably possible.
Dr Sarah Kelly will also process personal data in relation to legitimate interests in running her practice, for example the processing of invoicing and receipts, account management and tax returns.
What rights do I have with regards to my personal data?
You have the right to request a copy of the personal information that Dr Sarah Kelly has collected from you (Subject Access Request), as well as the right to request deletion of data (right to be forgotten).
How is personal data stored?
Please be reassured your privacy will be taken extremely seriously. Dr Sarah Kelly will take all reasonable steps to protect identifiable information and ensure security in the electronic systems where data is stored. All notes will be stored in system (hard drive) or portable devices that are password protected. Any handwritten notes will be stored in locked, secure facility with access restricted to Dr Sarah Kelly. All personal data is stored in compliance with EU General Data Protection Regulations (GDPR) rule.
How long will the data be kept for?
Dr Sarah Kelly will not keep your data for longer than necessary. Confidential paper records will be destroyed by confidential shredding when data is no longer required for lawful processing and storage, e.g., when a legal case has settled, or when 7 years has elapsed since the completion of psychological work. Electronic data will be permanently deleted by the same standard.
Who will information be shared with?
Your information will be kept confidential. Identifiable information will be minimised as much as is possible. Permission will be sought to share any information with 3 rd parties, e.g., assessment, progress, treatment reports. The option to communicate with a person’s GP will also be discussed in the initial stages of the work with Dr Sarah Kelly. If you are receiving psychology assessment or intervention with Dr Sarah Kelly on a funding agreement through BUPA, please note Dr Sarah Kelly is expected to share information with BUPA for the following purposes:
- To allow funding decisions, including extensions to funding
- To provide clinical quality information
- To invoice services provided.
- To notify BUPA of any serious incidents or assist during a complaint investigation.
There are certain circumstances in which Dr Sarah Kelly will be required (in accordance with Health Care Professional Council compliance) to breach confidentiality. For example, where there is evidence to suggest the safety of the client, other people known to the client, and/or the health, welfare or safety of children or vulnerable adults is at risk of compromise. In these circumstances, or
if the client discloses the making of any threats to a third party, Dr Sarah Kelly is duty bound to advise the appropriate agencies and authorities.
Who to contact in the event of concern or complaint?
If you have a complaint or concern about the way Dr Sarah Kelly uses your personal information you have the right to complain to Dr Sarah Kelly, 120 Sandalwood, BL5 2RQ. If you do not receive a response within 30 days or are not satisfied with the response you have the right to complain to the Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF www.ico.org.uk. Further details relating to all the above can be provided on request.