-
Introduction
Mind Drive Ltd (“I”, “me”, “my practice”) is committed to protecting your privacy and handling your personal information in a safe, lawful and transparent manner.
This privacy notice explains how your personal data is collected, used, stored and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
-
Data Controller
The data controller for the purposes of UK GDPR and the Data Protection Act 2018 is Mind Drive Ltd
Address: Eureka Leisure Park, 160, Upper Pemberton, Ashford TN25 4AZ
Email: laurie AT minddrive DOT co DOT uk
ICO Number: ZC112201
-
What information I collect
I may collect and store the following information:
Personal Information:
-
Name
-
Address
-
Date of Birth
-
Phone Number
-
Email Address
-
GP Details
-
Emergency Contact Details
Therapy Related Information (Special Category Data):
-
Session notes
-
Information about your mental health, wellbeing and personal history
-
Risk assessments and safeguarding information
-
Correspondence between us
Administrative Information:
-
Appointment dates and times
-
Payment records and invoices
-
Why I collect your information
Your information is collected in order to:
-
Provide counselling and therapeutic services
-
Maintain accurate clinical records
-
Ensure your safety and wellbeing
-
Communicate about appointments and administration
-
Meet professional, ethical and legal obligations
-
Manage the running of the practice
-
Where specific consent is required (e.g., sharing information with other professionals).
I only collect information that is relevant and necessary.
-
Lawful basis for processing
Under UK GDPR law, the lawful bases I rely on are:
-
Contract – to provide counselling services to you
-
Legitimate interests – to run the practice safely and effectively
-
Legal obligation – where required by law (e.g safeguarding)
-
Special category data condition – provision of health/therapeutic care and professional confidentiality obligations
-
How your information is stored
Your information is stored securely.
I use:
-
Password protected and encrypted devices
-
Secure digital storage systems
-
Locked storage for any paper records
-
Secure email systems
Only I have access to your identifiable information.
Reasonable steps are taken to protect your date from loss, misuse or unauthorised access.
-
Confidentiality and sharing information
Your information is confidential.
It will not be shared with third parties without your consent, except where:
-
There is serious risk of harm to you or others
-
Safeguarding concerns arise
-
Required by law or court order
-
Discussed anonymously within professional supervision
-
In the unlikely event of my death a nominated professional executor (a qualified counsellor/health professional bound by the same confidentiality and ethical obligations) will take over the administration of my practice to deal with my appointments, signpost to alternative support and securely delete or transfer known records in accordance with data protection law. They would only access the minimum information necessary and would be bound by strict confidentiality.
Where possible, I will discuss any necessary disclosure with you first.
-
How long information is kept
Records are retained for as long as necessary to fulfil the purposes for which it was collected and to comply with legal and regulatory obligations:
-
7 years after the end of counselling
-
Up to the age of 25 for young people under 18 years
After this period, records are securely deleted or destroyed.
-
Your Rights
Under UK GDPR, you have the right to:
-
Access your personal data
-
Request correction of inaccurate data
-
Request deletion / Erasure (where legally possible)
-
Restrict or object to processing
-
Data Portability (request of copy of your personal data in a portable format)
-
Withdraw consent where applicable
-
Make a complaint
Request can be made by contacting me directly.
-
Contact and complaints
If you have questions about how your data is handled, please contact:
Laurie Butterfield
Mind Drive Ltd
laurie AT minddrive DOT co DOT uk
If you are unhappy with how your data is managed, you can contact the Information Commissioner’s Office (ICO):
0303 123 1113
-
Changes to this notice
This privacy notice may be updated periodically. The most current version will always be available on my website or provided on request.