GDPR Privacy Statement Mandy Greaves Counselling takes the security of client’s personal information very seriously. I am registered with the Information Commissioner’s Office (ICO - https://ico.org.uk/) and abide by the legal requirements as documented by the General Data Protection Regulations (GDPR). This statement explains how I will protect your personal data giving you the option to consent for me to handle your data as described. Collection of your Personal Information Information that you provide will help me to conduct a thorough assessment and will allow me to plan and prepare the correct interventions. This allows me to maintain correct records, including contact details in case of emergency and any other necessary requirements. Details collected can include your age, health conditions, relationship status and the issues that you are presenting with I am able to collect this information under the GDPR regulations. Confidentiality As detailed in theTherapy Agreement, your sessions are private and confidential and as a practitioner i am bound by the Ethical Framework as set out by the British Association for Counselling and Psychotherapy (BACP). There may be occasions when by Law, confidentiality can be broken if the following occurs: • If a Court Order requires it. • Information relating to Terrorist Activity, Drug trafficking or Money Laundering • Concerns regarding Safeguarding and Child Protection. • If you give me consent. • If there is a risk of harm to yourself or others. • Attending Clinical Supervision ( This is a requirement of all counsellors, however personal client details will be unidentifiable) Storing your information Client records will be stored in a secure, locked cabinet, within the Higher Walton Counselling office and entry is only accessed by myself. Personal contact information including contact numbers and text messages will be stored on my mobile phone under a coded entry to which is accessed through Bio-metric/Pass code protected entry. Once clients have completed therapy this information will be deleted immediately. However, as a requirement for Insurance purposes, client practice notes are required to be kept for up to 7 years, Protecting your rights to your Personal Data Under GDPR regulations, you have the right to request information held about you, and restriction of your information can also be made. The ICO and the BACP have information which can assist you if you feel your information is not being handled appropriately, you can also follow their complaints procedure if you feel this is appropriate. Special Circumstances If in the unlikely event that your practitioner is unable due to injury or death to maintain your personal information, arrangements will be in place to allow an authorised person to destroy your information in these circumstances.