General Data Protection Regulation (GDPR) Statement
Privacy Statement about personal information kept, collected, stored, and processed. By Barbara Lerch, version May 2018
The General Data Protection Regulation (GDPR) is concerned with the personal information about you that I collect, store, and share. This statement details my GDPR policy.
Personal information google analytics collects:
This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”). The use includes the “Universal Analytics” operating mode. This facilitates the assignment of data, sessions and interactions across several devices to a pseudonymous user ID and thus the analysis of a user’s activities across devices.
Personal information I collect:
I collect the following information in order to help me provide EMDR trainings, EMDR supervision and psychological therapy to you, receive clinical supervision and consultation, and to maintain my accounts for billing and invoicing.
Personal details may include: name, gender, date of birth, relationships; parents, siblings, children, occupation, address, telephone numbers, email address, counselling/therapy history, medical conditions, prescribed medication, emotional & psychological issues, employment, education, and social life details.
Sensitive information: physical and mental health details, sexual life, racial or ethnic origin, religious or other beliefs, offences and alleged offences.
How I may Process/Share your personal information
I have regular supervision/consultation with other therapists, (psychologists, psychotherapists, counsellors) for my own professional development and the wellbeing of clients or participants in the trainings of the EMDR Centre London. I will discuss personal details in these consultations. They are also bound by the same rules of confidentiality, code of ethics, and rules of GDPR.
Therapeutic Will: In the case of my death, your name and contact details will be shared with my Therapeutic Executor. This is so you can be contacted if you are still in therapy with me.
If I have reason to believe that you intend to harm another person/organisation (e.g. terrorism), or yourself, the law may require that I inform an authority without seeking your permission. In such a situation, the law may require that I share your personal information without your knowledge. I would always endeavour to discuss this with you in advance if possible or appropriate. It is also the law that a judge can require the release of clinical notes without your permission, and I would be bound by law to release them. Again I would discuss this with you beforehand should this occur.
Storage of Information
Paper: written notes, contact details, personal information, psychometric tests when completed, assessment/history taking notes and brief therapy process notes. All paper files/notes are kept in locked storage.
Smartphone: I do not keep any notes or personal details directly stored in my phone. I access my email account and electronic files through my computer and smartphone and all relevant devices are password protected.
Storage. I keep electronic files with basic information on psychotherapy sessions securely stored on external hard disks, and locally on my PCs, protected by passwords and two-step authentication.
Online supervision/therapy: For online work I use Skype, which is securely encrypted end-to-end.
Longer-term retention of Information
I am required by law to keep your written notes for at least 7 years after we have completed our work together. I may keep them longer in case you return to a training, to supervision or to therapy in the future so that I have a reference for our work together.
You Have the Following Rights:
To be informed of what information I hold (this document)
To see the information that I hold about you (free of charge for the initial request)
To rectify/correct any inaccurate or incomplete personal information
To withdraw consent for me to hold your personal information. Note that I would not in such circumstances be able to continue the provision of therapy/supervision
To request that your personal information be erased/deleted/shredded. I can decline if the information is needed for me to practice lawfully & competently, or if there is an adverse reason (such as a complaint or legal reason).
Continuation of participation in trainings, therapy or supervision with me will be understood as acceptance of these terms.