The Psych Practice Digital Hub

The Psych Practice aims to be as clear as possible about how and why information about you is used so that you can be confident that your privacy is protected. This policy describes the information that The Psych Practice collects when you use the service. This information includes personal information as defined in the General Data Protection Regulation (GDPR) 2016 [and the subsequent UK Data Protection Bill that will be enacted from May 25th 2018.

The policy describes how The Psych Practice manages your information when you use our services, if you contact us or when we contact you. The Psych Practice uses the information collected in accordance with all laws concerning the protection of personal data, including the Data Protection Act 1998 and the GDPR 2016. As per these laws, The Psych Practice is the data controller; if another party has access to your data, we will tell you if they are acting as a data controller or a data processor, who they are, what they are doing with your data and why The Psych Practice needs to provide them with the information.

Please contact us if you have any queries on:

Telephone: 020 8058 4060

Email: [email protected]

If you are not satisfied with the answers from the Data Protection Officer, you can contact the Information Commissioner’s Office (ICO) https://ico.org.uk.

The Psych Practice needs to collect information about you so that we can know who you are and communicate with you in a personal way. The legal basis for this is a legitimate interest.

• 
  
  • Deliver services to you. The legal basis for this is the contract (verbal or written) with you.
  • Process your payment for services. The legal basis for this is the contract with you (verbal or written).
  • Verify your identity do that we can be sure we are dealing with right person. The legal basis for this is a legitimate interest.
  • Contact you in case there is a problem. The legal basis for this is a legitimate interest.
  • Provide you with useful information about services provided. The legal basis for this is legitimate interest. 
• 2. What personal information do we collect and when do we collect it?
  For The Psych Practice to provide you with services, we need to collect the following information:
  • Your name
  • Your contact details including a postal address, telephone number(s) and electronic contact such as email address.
  • Your payment card/bank/insurance details
  • The Psych Practice collects this information directly from you.
    We may also collect information about you from third parties; such as another health professional (such as your Doctor) to provide a complete health assessment

  • 3. How do we use the information that we collect?

    The Psych Practice will use the data collected from you in the following ways:

    • To communicate with you so that we can inform you about your appointments with us. This will involve the use your name, your contact details such as your telephone number, email address or postal address.
    • To deliver the correct service to you we will use your name, your contact details and the details about you.
    • To create your invoice we will use your name and email address, bank or insurance details.
    • To process your payment, we will use your name and your payment card /bank or insurance details. 

    4. Where do we keep the information?

    The Psych Practice will keep your information in the stores described below.

    4.1. On our company computers
    The Psych Practice uses personal computers which are password protected and encrypted hard drives. Passwords are not shared.

    Dropbox is used to store your data

  • 5. How long do we keep the information?

    We keep the electronic invoice for seven years as this is the required length to comply with the HMRC requirements. After seven years we delete the invoices using the Sage delete function.

    The Psych Practice will keep your reports for 10 years as this is the requirement for clinical data.

    6. How can I see all the information you have about me?

    You can make a subject access request (SAR) by contacting the Data Protection Officer. The Psych Practice may require additional verification that you are who you say you are to process this request.

    We may withhold such personal information to the extent permitted by law. In practice, this means that we may not provide information if we consider that providing the information will violate your vital interests.

    7. What if my information is incorrect or I wish to be removed from your system?

    Please contact the Data Protection Officer. The Psych Practice may require additional verification that you are who you say you are to process this request.

    If you wish to have your information corrected, you must provide us with the correct data and after we have corrected the data in our systems, we will send you a copy of the updated information in the same format at the subject access request in section 7.