Once initial contact has been made by you, varying levels of personal information will be collected, whether an appointment is confirmed or not.

By entering into a therapeutic relationship with Andrea, consent is required to the making and keeping of records that contain personally sensitive information, in line with the General Data Protection Regulation (GDPR) 2018.

Andrea is both the data controller and processor for the information obtained and stored from you.

Andrea stores the information contained within the assessment form, which is completed by you (or with the support of Andrea in some circumstances).

Session notes are also kept alongside the assessment form.

The records are for Andrea's own personal use and will remain confidential, in line with our confidentiality agreement, unless Andrea receives a subpoena from a court of law.

Records will be kept in a lockable filing cabinet and kept for a period of 5 years, as you may wish to return to therapy in the future. This is a change in policy made as of 1 May 2022, prior to 1 May records are kept for 10 years. After this period, all records will be destroyed appropriately and securely. This also applies to electronic files and emails.

Text and other communications are destroyed yearly.

You can request to see the notes at any time during this period, either verbally or in writing and Andrea will provide such information to you within one month.

You also have the right to ask Andrea to change any information that you feel is incorrect or request that the information stored about you is deleted – except for information that is held for business tax or legal purposes.

Any breaches of data that Andrea stores about you will be reported to The Information Commissioner and to you within 72 hours.

If you wish to complain about how Andrea stores data about you, in the first instance please contact her directly.