GDPR (General Data Protection Regulation)

 

Your records will be kept for at least 7 years following the last occasion on which treatment was given.  In the case of treatment to minors, it is advisable that records should be kept for at least 7 years after they reach the age of majority (18). Or in a Child Protection Case or Adoption case the records will be kept for 25 years.

 

For the purpose of the Data Protection Act 1998   (now known as the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679)), the data controller is Michael J Rivers. By engaging in therapy you will give me the consent to store your information.

 

After each session brief notes will be written for the sole purpose of maintaining a record of what has been discussed.

 

The information you will give me and the notes will be stored and kept securely and confidentially in a safe filing system. Any electronic correspondence is stored in an encrypted computer system protected by an Antivirus system that is updated on a regular basis.

 

Accessing your information - Subject Access Request (SAR)

 

What is a Subject Access Request?

 

Under the Data Protection Act 1998 an individual has the right to request all personal data that a Data Controller holds about them by making a subject access request.  The Data Protection Act gives Data Controllers 30 calendar days to complete a subject access request. This time starts from the day we receive a clear request and enough identification to be sure that the request is from the data subject. Once this information has been received the designated Data Controller (your counsellor) will contact you to acknowledge that the 30 day period has started.

 

 

You can make a request to access your personal information by filing in a SAR form and e-mail it to emdrsuffolk@outlook.com

 

Your rights to rectification and erasure

 

You have the right to ask me to rectify any information I hold about you and to delete them including your personal information that is no longer relevant to original purposes – for example when the therapeutic relationship has ended or if you wish to withdraw consent. In all cases and when considering such requests, these rights are obligatory unless it’s information that we have a legal obligation to retain.

 

Your rights to data portability

 

You have the right to receive your personal information as previously provided, and to transfer this information to another party.

 

I have read and agree the guidelines for receiving Psychotherapy and/or EMDR Therapy.

 

I understand that my therapy sessions will be offered according to my need and my level of engagement and that I will periodically review my progress during our sessions. Sessions will be offered based on my continued attendance and ability to engage with my therapy sessions.