Privacy Policy
I am committed to protecting the privacy of all past, existing and future clients. The purpose of this Privacy Policy is to give you a clear explanation of information I hold; how I use this information; and the procedures I have in place to keep it safe.
About me
I am Karen Fisher, a UKCP Registered Attachment-based Psychoanalytic Psychotherapist.
My contact details are as follows: m. 07986 850882, e. fisherkaren@tutamail.com
What information I hold
You have the right to know what information I hold, why and how I hold it and for how long. The data I hold may include:
1. Your contact details (phone number, home address, email address, emergency contact)
2. Your GP's name/contact details
3. Relevant medical information
4. Brief session notes
5. Payment information
6. Invoices
7. My emails to you and yours to me
Why I hold information
I keep certain information so that I can work safely and professionally with you, in line with the guidelines of the professional organisations to which I belong, including the UKCP (UK Council for Psychotherapy). I will never collect sensitive information about you without your explicit consent; and I will not share your personal details for any other purposes without your consent unless required by law.
Contact details are needed, for example, in the event of having to reschedule a session. I keep your email address for sending invoices and in case we agree to do any work via email. My clinical supervisor also keeps these contact details securely so that you could be contacted if I became suddenly incapacitated through a health crisis or other emergency (as required by my Clinical Will).
Your GP’s name/contact details and relevant medical information are needed in case you and I agree together for some reason based on your best welfare, that I should contact your GP.
Brief notes may be kept to remind me of important points I want to be sure to remember to discuss in our next session and/or in supervision.
Payment information and invoices are needed as I am required by law to retain certain financial information for tax purposes.
How I hold information
I keep your contact details on my mobile phone and on my computer. My computer is locked with a strong password (with encrypted backup to an external hard drive, also strong password protected); my iPhone is locked with a pin code and is Face ID protected. Neither my computer nor my phone are shared with anyone else.
I also keep your name in a list, in paper form, in a locked filing cabinet. This list is kept separately from any brief session notes, which are kept anonymised on my computer.
Your email address will be held in my Tutanota account, which is encrypted and held on servers in Germany; and, if we agree to online video sessions, on Zoom, which is also encrypted.
In the unlikely event that I discover there has been a data breach of your personal information that could put you at risk, I will undertake to tell you as soon as possible.
How long I hold information
I am required by my professional organisations to hold your data for 7 years after your final session. Therefore, all records will be permanently deleted after this time. I will remove your contact data when we have finished our work, unless you tell me that you would like me to retain it in case we work together again in the future.
I am required by law to retain certain financial information (payment information and invoices) for tax purposes. I keep this data for 7 years.
I permanently delete emails after I have noted the contents.
When sensitive paper data is to be destroyed, I cross-shred it.
On the occasions when asked to write a letter, or report on your behalf, I will endeavour to do so; and, once you have agreed the contents, I will permanently delete the information from my system.
Whenever you give me personal data, you are consenting to its collection and use in accordance with my Privacy Policy. You have the right to withdraw your consent at any time.
Any changes to my Privacy Policy will be updated here.
