Privacy and Confidentiality

We are compliant with the Data Protection Act (DPA, 1998) and General Data Protection Regulation (GDPR).  The lawful and correct treatment of person-identifiable information by Assured Psychological Services Ltd (APS) is paramount to the success of the organisation and to maintaining the confidence of its service users and associates. Your privacy is very important to us and so we will only ever use your personal information appropriately and in a secure manner. Person-identifiable information is data that identifies or is associated with you. 

 

What we collect: we collect your contact and identification details; information you provide in self report questionnaire and/or diagnostic testing;  your psychological needs; professional contact information; private medical provider information; attendance information for billing purposes also; information provided by professionals involved in your care and information shared during psychological sessions e.g. clinical note records.

​

Why we collect: we have legitimate reasons and professional obligations to collect and process your data. We collect it often with your consent; for the performance of a contract or related preparations in order to effectively and safely deliver mental health care/treatment/psychological services and to manage healthcare systems to provide contractual care for you; to adhere to legal and regulatory obligations; for our legitimate business reasons as long as this is not detrimental to your own rights. 

​​

How we collect your data: the vast majority of data we collect will be provided by you e.g. in our terms and conditions contract; correspondence; self report questionnaires and diagnostic testing; therapy session clinical note records; from individuals and/or professionals involved in your care/acting on your behalf. 

​

How we use it: person-identifiable information is processed fairly, stored, transferred, disclosed and disposed of lawfully. ​​Clinical records are securely stored and are subject to General Data Protection Regulation (GDPR).  

​

Why we share your information: to honour professional and legitimate safeguarding obligations to protect your vital interests and the welfare of others.  In addtion, for the performance of a contract or related preparations in order to effectively and safely deliver mental health care/treatment/psychological services and to manage healthcare systems to provide contractual care for you.

​

How long we retain your data for: We are lawfully required to retain your clinical information for reasons of public interest in the area of public health. Clinical records are legitimately kept for a minimum of eight years and are then confidentially destroyed. For children, data is retained in child health/mental health services until aged 25 years, 26 years if started in the service aged 17 or eight years after their death if it occurred during episode of care. 

​​

Your rights - 

Subject access requests: You have a right to access the data we hold about you. Please submit any written requests to either louise.egan@proton.me or drruthwatson@protonmail.com

​

Data Deletion requests: We are lawfully required to retain your clinical information for reasons of public interest in the area of publich health. The right to erasure does not apply to data processed under these lawful reasons. Your right to delete your data is therefore not absolute. There maybe additional grounds that justify the reason to retain your data beyond the schedule detailed above e.g. safeguarding legal oblligations and/or in defense of an existing legal claim. If you have any concerns please do contact us and we will gladly explain reasoning in more detail for you and listen to your concerns. 

​​​

Your details will not be sent/sold to any third party.