Privacy Statement: Caz Squires Counselling

This statement describes what I do with your personal information, from first contact until after your counselling ends.

Your privacy is important to me. I will keep your personal information safe and secure and only use it for the purposes for which you gave it to me. I follow data protection laws and guidance and I am registered with the Information Commissioner’s Office.

My details:

My BACP Registration number is 417365

My ICO registration number is ZC069665

Email: info@cazsquirescounselling.com

What information do you collect about me?

If you contact me with an enquiry, I collect information to decide if I can provide counselling services to you. If you do not become a counselling client, I will delete your information within one month.

If you do become a client, I will hold your name, address, phone numbers, e-mail addresses and GP details together with emails, messages and correspondence you send me. I will also hold information provided at assessment discussions and a brief summary of what we explored in each counselling session.

On what lawful basis do you hold data on me?

I process your data under the following lawful bases:

• Contract: to deliver a counselling service to you

• Legitimate interest: for ethical practice and client safety

• Consent: for storing sensitive information

• Legal obligation: when required by law e.g. safeguarding concerns

How will you use my information?

I will never use your personal data for purposes other than the delivery and administration of the therapy service I am providing to you.

Will my data be shared with any third parties?

I will not share your information with other organisations or people except in the following circumstances:

• Consent – I might share information with those whom you have requested or agreed I should contact e.g. your GP

• Serious harm or safeguarding – I might share your information with relevant authorities if I believe it could prevent serious harm to you or someone else

• Compliance with the law – I may share your information where required to by law

• If I am taken seriously ill or die, I have nominated a professional counsellor, bound by the same ethical and professional obligations as me to access your contact data only, to ensure that you are informed.

I do not share your personal data with third parties for marketing purposes.

I use Web Healer, a UK based provider, to host my website. Web Healer is fully GDPR compliant and has a privacy policy available at: https://www.webhealer.net/privacy-policy. My website uses cookies and WP Statistics. Almost all websites use cookies, which are small files put onto your computer by websites as you surf them. Most browsers allow you to refuse to accept cookies and to delete cookies and you can find up-to-date information about doing that from whichever browser you use.

I use a secure email service provided by Web Healer, which uses industry-standard encryption (TLS) to protect messages in transit, to receive and send client communications such as scheduling, amending and cancelling appointments, and to provide standard documents. I use password protection to send documents that I have created or amended and which contain sensitive information.

I offer online counselling via the ZOOM platform, which is a secure, confidential and reliable video software platform. No online platform can guarantee complete confidentiality but Zoom offers end to end encryption and is GDPR compliant. Zoom will have access to data inputted to join online video conferences. Please refer to their website to see their own privacy policy and further information.

How do you keep my data secure?

I keep paper records in locked storage. I keep electronic records in password protected documents or on encrypted emails or software packages. I store your personal identifiable information separately from the brief summaries of our sessions; I use a client reference number only on session summaries.

How long do you retain my data?

I will securely destroy all data on you six years after your counselling ends (per BACP guidance)

What are my data rights?

You have the right to:

• Access your personal data

• Request corrections or deletion

• Restrict or object to processing

• Withdraw consent at any time

• File a complaint with the ICO: www.ico.org.uk

Please be aware that if you withdraw your consent for me to hold and process your data whilst receiving counselling, your counselling will have to end, as I am required by the BACP and my insurers to maintain appropriate client records. If you withdraw consent, there will still be some basic information which I would still have a legitimate purpose to retain for six years, to meet their requirements.

Complaints

If you have any concerns about how I handle your personal data, please raise them with me in the first instance so that I can try to resolve the issue. You can contact me using the details provided in this privacy notice. If you remain dissatisfied after we have discussed your concern, you have the right to lodge a complaint with the information Commissioner's Office at www.ico.org.uk or by calling 0303 123 1113