Privacy Policy

Dorota Styk Psychotherapy is committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, and safeguard your personal information in accordance with UK data protection laws, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Information We Collect

We collect and process the following personal information:

– Name, contact details, and demographic information: This includes your full name, address, phone number, email address, date of birth, gender, and any other relevant demographic data that may help us tailor our services to your needs.

– Medical history and current health status relevant to therapy: We gather information about your past and present physical and mental health conditions, medications, and any other health-related information that may impact your therapy.

– Session notes and treatment plans: During your therapy sessions, we create detailed notes about the topics discussed, your progress, and any treatment plans or strategies developed to address your concerns.

– Payment information: This includes details necessary for processing payments, such as bank account numbers or credit card information, ensuring secure and efficient financial transactions.

This information is collected directly from you when you:

– Enquire about our services: Initial contact may involve providing basic personal information to help us understand your needs and determine if our services are suitable for you.

– Book an appointment: When scheduling a session, we collect necessary details to arrange the meeting and prepare for your visit.

– Attend therapy sessions: During sessions, we gather more in-depth information to provide effective therapy and track your progress over time.

– Make payments for services: Financial transactions require specific information to process payments securely and maintain accurate financial records.

How We Use Your Information

We use your personal information for the following purposes:

– To provide psychotherapy services: Your information helps us tailor our approach to your specific needs, ensuring effective and personalized therapy sessions.

– To manage your appointments and maintain accurate records: We use your contact details to schedule and remind you of appointments, and keep detailed records of your therapy journey.

– To process payments: Your financial information is used solely for the purpose of processing payments for our services.

– To comply with legal and professional obligations: We maintain records as required by law and professional standards to ensure the highest quality of care and legal compliance.

Our lawful basis for processing your data is:

– Contract: Processing is necessary for the performance of our therapy contract, allowing us to deliver the services you have requested.

– Legal obligation: We are required to keep certain records for tax purposes and to comply with healthcare regulations and professional standards.

– Legitimate interests: To manage our practice effectively and provide the best possible care, we need to process your information in ways that directly support your therapy goals.

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Typically, we keep therapy records for 7 years after the last contact, in line with professional guidelines. This allows us to provide continuity of care if you return for therapy and meets our legal and ethical obligations.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes using encrypted storage systems, secure networks, and strict access controls to ensure your information remains confidential.

Your Rights

Under data protection law, you have rights including:

– The right to access your personal data: You can request a copy of all the information we hold about you.

– The right to rectification of inaccurate data: If you believe any information we hold is incorrect, you can ask us to correct it.

– The right to erasure (in certain circumstances): Also known as the ‘right to be forgotten’, you can request that we delete your personal information, subject to certain conditions.

– The right to restrict processing: You can ask us to limit how we use your personal data.

– The right to data portability: You can request that we transfer your data to another service provider in a machine-readable format.

– The right to object to processing: You can object to certain types of processing of your personal data.

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month.

Sharing Your Information

We treat all information you provide as confidential. We will only share your information in the following circumstances:

– With your explicit consent: We may share information with other healthcare providers or relevant parties if you give us clear permission to do so.

– If required by law: In rare cases, we may be legally obligated to disclose certain information to authorities.

– If there is a risk of serious harm to yourself or others: In emergency situations where there is a clear risk of harm, we may need to break confidentiality to ensure safety.

We do not transfer your data outside the UK, ensuring compliance with UK data protection laws.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated to you directly via email or during your next therapy session.

Contact Information

If you have any questions about this privacy policy or how we handle your personal information, please contact:

Dorota Styk
contact@dorotastykpsychotherapy.com

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

Last updated: 2024.10.24