
GDPR
Keeping Information about You:
New Rules about Data
Why do I keep information about you? And what information do I keep?
As a psychotherapist, supervisor and consultant, I often need to keep some information about the
people I am working with in order to be able to do my job. Information such as contact details, notes,
reports I may write on your behalf and where relevant, information from other professionals
involved in your care.
It is important you know that the personal information I hold is only used in the context of my work
with you. I will not share your personal details with any other person or organisation without your
knowledge and permission, unless there is a legal requirement e.g. a safeguarding issue, or perceived
risk of harm.
How do I keep your information safe? How long do I keep your information?
I take all reasonable precautions to ensure that your personal information is used and stored
securely. Electronic information is held securely, and is also encrypted whilst paper documentation is
stored in a secured archive. When my work with you ends your data will continue to be stored
securely. The duration of storage will vary depending on your situation. Usually this is for 7 years
after you reach your majority (18) and then it will be destroyed. 7 years for anyone who is over 18
from the outset of work.
N.B - If I work with you in a freelance capacity within a service/organisation you’re accessing, e.g. the
NHS or a social care departments/teams then information about you - about our work - will also be
stored on their systems. These organisations will have their own policies on what, where and how
long they store your data.
Who can see my information?
I obviously see your information and if I’m working with you via an organisation e.g. the NHS or a
social services agency, for example, then other professionals involved in your care will also have
access to your records. This will be a limited, on a need to know, basis.
Why am I telling you this?
Because I keep information about you the law now says I must tell you what sort of information I am
holding, why I am keeping it and how it is stored. Because I store informa9on about people I am
registered with the Information Commissioners Office and follow a law called the Data Protection
Act.
*Please kindly circle one of the following statements:
Yes, I consent to you holding and processing my data in accordance to the new general data
protection regulations.
Or
No, I don't consent.
Name, date and Signature:


