Dr Louise McCusker (DBT Therapist/Clinical Psychologist), Anne Francis (DBT Therapist/Registered Nurse) Holly Markwick (DBT Therapist / Social Worker) and Rebekah Fisher (DBT Therapist / Mental Health Nurse) work and Katy Stafford (DBT Therapist / Mental Health Nurse) are each data controllers for their own clinical data. Brighter Horizons Brighton is a trading name only and data is controlled by individual practitioners as part of their independent therapy work as sole traders. This privacy information explains how we use any information we collect about you either in person or from our website. All information obtained will be processed by the data controllers who are the individual therapist practitioner providing independent therapy services as part of the trading name Brighter Horizons Brighton. Each therapist is registered with the ICO and is a data controller. Your data controller will be the person who makes direct contact with you following an enquiry about our services.
What information do we collect and why?
Once you have been allocated a therapist, information will only be obtained directly from you to enable contact with you, your GP or next of kin in order to maintain your safety or follow up between sessions (according to statutory obligations). Information obtained is limited and proportional and never shared with third parties for marketing or advertising purposes. Information will only be shared in exceptional circumstances when your safety or the safety of others is deemed a significant risk. In these instances, we endeavour to inform you before any information is shared and information is only shared with organisations directly involved in your care (GP/insurance company) or emergency healthcare services. Information (such as your name, age and diagnosis) may be shared in the context of supervision in accordance with professional responsibilities to ensure safe and effective practise.
Information that we collect includes personal or sensitive information such as:
The lawful basis for data processing your information falls under the legitimate interests category of the General Data Protection Regulation (GDPR, 2018). Practitioners need the information collected to provide you with the best possible psychological interventions and treatment. Practitioners routinely collect special category data (information about you that is sensitive and requires greater safeguards in place such as your diagnosis or sexual orientation). Special category data is collected under article 9 (2) of the GDPR which states that such data may be collected for the provision of health treatment. Practitioners cannot effectively offer you treatment without this information.
How we store information about you and for how long
All information is stored securely according to GDPR (2018) rules. Electronic information is minimal and stored on encrypted/password protected devices. Paper records are stored in locked filing cabinets. Practitioners take steps to protect your identity where appropriate, including anonymising or using identifiers only known to the data controllers in order to communicate based on clinical need.
Practitioners keep information about you only for the time in which we need to. Data on the work carried out will be kept for up to 7 years, in accordance with professional indemnity obligations (in the case of a child or young person, records are kept for up to 7 years after their 18th birthday). Where this is not necessary, data will be destroyed upon conclusion of your work with the individual practitioner.
Rights and complaints
Your rights to privacy are extremely important to us and we prioritise protecting these. You have the following rights in relating to the data we store and process:
You can find out what personal information practitioners hold about you by making a written ‘subject access request’ or ‘right of access’ under the GDPR. This needs to be addressed to the individual practitioner who has provided your treatment. Practitioners will then supply you with: a description of the data they hold about you, information about how it was obtained, why and for what purpose they are holding your information, what categories of personal data is held, who it could be disclosed to, the retention periods for your data and give you a copy of the information held. You can ask practitioners to correct or remove any information that you think is inaccurate.
Practitioners are individually responsible for complaints about their practice and data storage. Practitioners want to ensure you are satisfied with the service they provide and the way in which they process your personal information. If you have a complaint, in the first instance, please talk to whoever is directly involved in your care or who has made contact with you about any questions or concerns you have about the processing of your personal data. If this does not achieve a satisfactory resolution, please contact the Information Commission Organisation to lodge a complaint. Contact information ICO:Website: https://ico.org.uk/concerns/Email: [email protected]Telephone: +44 (0) 303 123 1113
Please note, Brighter Horizons Brighton is a shared trading name used by independent sole trader therapists. It is not a partnership, company or other legal entity. Each therapist practicing under the Brighter Horizons Brighton name operates as an independent practitioner and is solely responsible for their clinical work, professional conduct, client contracts, records, data protection compliance and professional indemnity insurance. No therapist accepts responsibility or liability for the acts, omissions or services provided by any other therapist using the Brighter Horizons Brighton name.
What information do we collect and why?
Once you have been allocated a therapist, information will only be obtained directly from you to enable contact with you, your GP or next of kin in order to maintain your safety or follow up between sessions (according to statutory obligations). Information obtained is limited and proportional and never shared with third parties for marketing or advertising purposes. Information will only be shared in exceptional circumstances when your safety or the safety of others is deemed a significant risk. In these instances, we endeavour to inform you before any information is shared and information is only shared with organisations directly involved in your care (GP/insurance company) or emergency healthcare services. Information (such as your name, age and diagnosis) may be shared in the context of supervision in accordance with professional responsibilities to ensure safe and effective practise.
Information that we collect includes personal or sensitive information such as:
- First name or given name
- Family name or surname
- Address
- Telephone numbers
- Date of birth
- Gender (or preferred identity).
- Age.
- Date of Birth.
- Relationships & children
- Occupation.
- Address.
- Telephone/SMS number
- Email address
- Medical conditions (if relevant)
- Prescribed medication.
- Psychological history and current difficulties.
- Sexuality
- Offences (including alleged offences)
The lawful basis for data processing your information falls under the legitimate interests category of the General Data Protection Regulation (GDPR, 2018). Practitioners need the information collected to provide you with the best possible psychological interventions and treatment. Practitioners routinely collect special category data (information about you that is sensitive and requires greater safeguards in place such as your diagnosis or sexual orientation). Special category data is collected under article 9 (2) of the GDPR which states that such data may be collected for the provision of health treatment. Practitioners cannot effectively offer you treatment without this information.
How we store information about you and for how long
All information is stored securely according to GDPR (2018) rules. Electronic information is minimal and stored on encrypted/password protected devices. Paper records are stored in locked filing cabinets. Practitioners take steps to protect your identity where appropriate, including anonymising or using identifiers only known to the data controllers in order to communicate based on clinical need.
Practitioners keep information about you only for the time in which we need to. Data on the work carried out will be kept for up to 7 years, in accordance with professional indemnity obligations (in the case of a child or young person, records are kept for up to 7 years after their 18th birthday). Where this is not necessary, data will be destroyed upon conclusion of your work with the individual practitioner.
Rights and complaints
Your rights to privacy are extremely important to us and we prioritise protecting these. You have the following rights in relating to the data we store and process:
- Right to be informed about what we practitioner do with your personal data
- Right to have a copy of all the personal information practitioners process about you
- Right to rectification of any inaccurate data practitioners process, and to add to the information practitioners hold about you if it is incomplete
- Right to be forgotten and your personal data destroyed
- Right to restrict the processing of your personal data
- Right to object to the processing practitioners carry out based on our legitimate interest
You can find out what personal information practitioners hold about you by making a written ‘subject access request’ or ‘right of access’ under the GDPR. This needs to be addressed to the individual practitioner who has provided your treatment. Practitioners will then supply you with: a description of the data they hold about you, information about how it was obtained, why and for what purpose they are holding your information, what categories of personal data is held, who it could be disclosed to, the retention periods for your data and give you a copy of the information held. You can ask practitioners to correct or remove any information that you think is inaccurate.
Practitioners are individually responsible for complaints about their practice and data storage. Practitioners want to ensure you are satisfied with the service they provide and the way in which they process your personal information. If you have a complaint, in the first instance, please talk to whoever is directly involved in your care or who has made contact with you about any questions or concerns you have about the processing of your personal data. If this does not achieve a satisfactory resolution, please contact the Information Commission Organisation to lodge a complaint. Contact information ICO:Website: https://ico.org.uk/concerns/Email: [email protected]Telephone: +44 (0) 303 123 1113
Please note, Brighter Horizons Brighton is a shared trading name used by independent sole trader therapists. It is not a partnership, company or other legal entity. Each therapist practicing under the Brighter Horizons Brighton name operates as an independent practitioner and is solely responsible for their clinical work, professional conduct, client contracts, records, data protection compliance and professional indemnity insurance. No therapist accepts responsibility or liability for the acts, omissions or services provided by any other therapist using the Brighter Horizons Brighton name.
