On this page you will find both information on how I handle personal data, and the privacy notice on using this website.

​

GDPR information for Catherine Hammett Counselling

 

I take data privacy very seriously and this privacy notice states how I collect and process personal data and the rights you have. 

 

Your personal data is processed in line with GDPR; for GDPR purposes, I, Catherine Hammett, am the data controller.

 

​

What information will I collect?

 

After initial contact, I will collect your name, contact number and email address.

 

If we go on to work together, I will collect your address, date of birth, bank account details, and any other personal and sensitive information which you share in our sessions in my notes.

 

 

How is this information stored and why do I have it?

 

• Your phone number is kept on my smartphone and your email in my email account for contact concerning appointments; I will not contact you for any other purpose. My phone cannot be accessed by any other person and the details are kept in PIN-protected apps.

• The personal details on your contract and this form are kept on an encrypted computer which only I have access to. 

• Notes based on our sessions are kept in a pseudonymised format (meaning they do not include your name or identifying details) in a password-protected file on an encrypted computer which only I have access to. This information is used to support our work together. The same applies to a log of attendance.

• Your name will appear on my bank statements. This will be kept on an encrypted computer which only I have access to. This is a legal requirement.

 

 

What is the legal basis for storing and processing this data?

 

GDPR has specific categories for the lawful basis of storing and processing data, and there are two in particular which are relevant for our working. You provide consent by reading and signing an agreement if we work together, and we have a contractual basis for me to hold the information so I can deliver counselling services to you. 

 

​

Do I share your personal data?

 

Our work is broadly confidential, but there are very specific exceptions.

 

 

Supervision

 

1. All practising therapists are required to discuss their client work with a supervisor, who also works in a confidential manner.

2. In the event of my death or becoming incapacitated your name and contact details will be shared with a colleague via a clinical will. This is to enable them to let you know the situation and to discuss counselling options going forward.

 

 

Legal obligation

 

1. It may become necessary during our work together for me to break confidentiality for safeguarding reasons (such as serious harm to self or others), and I am legally required to disclose information on acts of terrorism, drug trafficking or money laundering. The personal data shared will be adequate and proportionate. 

2. I may be required to share information in your notes if I am issued with a court order.

 

​

How long do I keep your information?

 

1. If you choose not to continue with counselling: after your assessment session your information will be disposed as confidential waste within two weeks.

2. If you choose to continue with counselling: I keep information for five years after your last session in line with the requirements of my professional insurance.

 

Your rights under GDPR:

 

• The right to be informed: to know how your information will be held and used.

• The right of access: to see your record of your personal information, so you know what is held about you and can verify it. You can also let me know if you would like to see our session notes and we can go through them in our next session.

• The right to rectification: to tell me to make changes to your personal information if it is incorrect or incomplete.

• The right to erasure (also called ‘the right to be forgotten’): for you to request any information held by me to be erased, but please note this will not include anything I am legally obliged to keep, including session notes, before the time periods outlined above.

• The right to restrict processing of personal data: you have the right to request limits on how I use your personal information.

• The right to data portability: under certain circumstances you can request a copy of personal information held electronically so you can reuse it in other systems.

• The right to object: to be able to tell me you don’t want them to use certain parts of your information, or only to use it for certain purposes.

• Rights in relation to automated decision-making and profiling: I do not use such systems so these rights are not relevant here.

 

​

Concerns and questions

 

If you have any concerns about how I have used your data you can discuss them with me via hello@chcounselling.com and 07858 339991. You can find out more about your data rights at: www.ico.org.uk. If your complaint is not resolved to your satisfaction you can contact the Information Commissioner’s Office at: www.ico.org.uk/concerns/handling or 0303 123 113.

 

Website privacy statement

 

This is additional information about data collection when you use this website.

 

​

Cookies

 

This site uses cookies. They are used in order to make websites work efficiently, as well as to provide information to the owners of the site about people’s use of it.  

 

Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. For further information, visit allaboutcookies.org.

 

Personal Information from your device is collected such as geolocation data, IP address, unique identifiers (e.g. MAC address) and other information which relates to your activity through the site. 

 

You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of website features may not function as a result.

 

 

Analytics

 

My website host Wix collects behaviour patterns of website visitors. This does not identify individuals but shows me the number of site visits, number of specific page views, and the type of device used: eg mobile, desktop, laptop. 

 

I also use Google Analytics as a third party company to collect behaviour patterns of website visitors. This information does not identify individuals but shows a collection of website usage from the number of website visits, frequently used pages etc… Google’s use and ability to share information collected via Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Use and the Google Privacy Policy at: https://policies.google.com/privacy.