Dr Louise McCusker (DBT Therapist/Clinical Psychologist), Anne Francis (DBT Therapist/Registered Nurse) Holly Markwick (DBT Therapist / Social Worker) and Rebekah Fisher (DBT Therapist / Mental Health Nurse) work and process information as part of the therapy services offered under the organisation name Brighter Horizons Brighton. This privacy information explains how we use any information we collect about you either in person or from our website. All information obtained will be processed by the data controllers Louise McCusker, Anne Francis, Holly Markwick or Rebekah Fisher, Brighter Horizons Brighton, 18a Clermont Road, Brighton, BN1 6SG who are all registered with the ICO. Your data controller will be the person (Anne. Louise, Holly or Rebekah) who makes direct contact with you following an enquiry about our services.
What information do we collect and why?
Information is only obtained directly from you to enable contact with you, your GP or next of kin in order to maintain your safety or follow up between sessions (according to statutory obligations). Information obtained is limited and proportional and never shared with third parties for marketing or advertising purposes. Information will only be shared in exceptional circumstances when your safety or the safety of others is deemed a significant risk. In these instances, we endeavour to inform you before any information is shared and information is only shared with organisations directly involved in your care (GP/insurance company) or emergency healthcare services. Information (such as your name, age and diagnosis) may be shared in the context of supervision in accordance with professional responsibilities to ensure safe and effective practise.
Information that we collect includes personal or sensitive information such as:
The lawful basis for data processing your information falls under the legitimate interests category of the General Data Protection Regulation (GDPR, 2018). We need the information we collect to provide you with the best possible psychological interventions and treatment. We routinely collect special category data (information about you that is sensitive and requires greater safeguards in place such as your diagnosis or sexual orientation). Special category data is collected under article 9 (2) of the GDPR which states that such data may be collected for the provision of health treatment. We cannot effectively offer you treatment without this information.
How we store information about you and for how long
All information is stored securely according to GDPR (2018) rules. Electronic information is minimal and stored on encrypted/password protected devices. Paper records are stored in locked filing cabinets. We take steps to protect your identity where appropriate, including anonymising or using identifiers only known to the data controllers in order to communicate based on clinical need.
We keep information about you only for the time in which we need to. Data on the work we carried out will be kept for up to 7 years, in accordance with professional indemnity obligations (in the case of a child or young person, records are kept for up to 7 years after their 18th birthday). Where this is not necessary, data will be destroyed upon conclusion of your work with Louise or Anne.
Rights and complaints
Your rights to privacy are extremely important to us and we prioritise protecting these. You have the following rights in relating to the data we store and process:
You can find out what personal information we hold about you by making a written ‘subject access request’ or ‘right of access’ under the GDPR. We will then supply you with: a description of the data we hold about you, information about how it was obtained, why and for what purpose we are holding your information, what categories of personal data is held, who it could be disclosed to, the retention periods for your data and give you a copy of the information held. You can ask us to correct or remove any information that you think is inaccurate.
We take complaints very seriously and want to ensure you are satisfied with our service and the way in which we process your personal information. If you have a complaint, in the first instance, please talk to Information Controllers Louise McCusker or Anne Francis (whoever is directly involved in your care or who has made contact with you) about any questions or concerns you have about the processing of your personal data. If this does not achieve a satisfactory resolution, please contact the Information Commission Organisation to lodge a complaint. Contact information ICO:Website: https://ico.org.uk/concerns/Email: [email protected]Telephone: +44 (0) 303 123 1113
What information do we collect and why?
Information is only obtained directly from you to enable contact with you, your GP or next of kin in order to maintain your safety or follow up between sessions (according to statutory obligations). Information obtained is limited and proportional and never shared with third parties for marketing or advertising purposes. Information will only be shared in exceptional circumstances when your safety or the safety of others is deemed a significant risk. In these instances, we endeavour to inform you before any information is shared and information is only shared with organisations directly involved in your care (GP/insurance company) or emergency healthcare services. Information (such as your name, age and diagnosis) may be shared in the context of supervision in accordance with professional responsibilities to ensure safe and effective practise.
Information that we collect includes personal or sensitive information such as:
- First name or given name
- Family name or surname
- Address
- Telephone numbers
- Date of birth
- Gender (or preferred identity).
- Age.
- Date of Birth.
- Relationships & children
- Occupation.
- Address.
- Telephone/SMS number
- Email address
- Medical conditions (if relevant)
- Prescribed medication.
- Psychological history and current difficulties.
- Sexuality
- Offences (including alleged offences)
The lawful basis for data processing your information falls under the legitimate interests category of the General Data Protection Regulation (GDPR, 2018). We need the information we collect to provide you with the best possible psychological interventions and treatment. We routinely collect special category data (information about you that is sensitive and requires greater safeguards in place such as your diagnosis or sexual orientation). Special category data is collected under article 9 (2) of the GDPR which states that such data may be collected for the provision of health treatment. We cannot effectively offer you treatment without this information.
How we store information about you and for how long
All information is stored securely according to GDPR (2018) rules. Electronic information is minimal and stored on encrypted/password protected devices. Paper records are stored in locked filing cabinets. We take steps to protect your identity where appropriate, including anonymising or using identifiers only known to the data controllers in order to communicate based on clinical need.
We keep information about you only for the time in which we need to. Data on the work we carried out will be kept for up to 7 years, in accordance with professional indemnity obligations (in the case of a child or young person, records are kept for up to 7 years after their 18th birthday). Where this is not necessary, data will be destroyed upon conclusion of your work with Louise or Anne.
Rights and complaints
Your rights to privacy are extremely important to us and we prioritise protecting these. You have the following rights in relating to the data we store and process:
- Right to be informed about what we do with your personal data
- Right to have a copy of all the personal information we process about you
- Right to rectification of any inaccurate data we process, and to add to the information we hold about you if it is incomplete
- Right to be forgotten and your personal data destroyed
- Right to restrict the processing of your personal data
- Right to object to the processing we carry out based on our legitimate interest
You can find out what personal information we hold about you by making a written ‘subject access request’ or ‘right of access’ under the GDPR. We will then supply you with: a description of the data we hold about you, information about how it was obtained, why and for what purpose we are holding your information, what categories of personal data is held, who it could be disclosed to, the retention periods for your data and give you a copy of the information held. You can ask us to correct or remove any information that you think is inaccurate.
We take complaints very seriously and want to ensure you are satisfied with our service and the way in which we process your personal information. If you have a complaint, in the first instance, please talk to Information Controllers Louise McCusker or Anne Francis (whoever is directly involved in your care or who has made contact with you) about any questions or concerns you have about the processing of your personal data. If this does not achieve a satisfactory resolution, please contact the Information Commission Organisation to lodge a complaint. Contact information ICO:Website: https://ico.org.uk/concerns/Email: [email protected]Telephone: +44 (0) 303 123 1113