Privacy policy

I, Dr. Rosanna Williamson, am a Chartered Counselling Psychologist and data controller for my private practice.

The services I provide are carried out in accordance with the British Psychological Society Code of Ethics and Conduct (www.bps.co.uk) and The Health and Care Professions Council Standards of Conduct, Performance and Ethics (www.hcpc.org).  You can find links for these organisations in the footer of this website.

This privacy policy is updated regularly in line with the ICO’s regulations and guidance. I am registered with the Information Commissioners Office (ICO), registration number: ZB459376.

What data is collected?

I will only collect data which is necessary and relevant for your assessment or treatment. 

I will hold any data you voluntarily send to me via email, text message or web enquiry form. If you make an initial enquiry about my services but we do not start therapy then I will delete any information about you.

If we agree to work together for therapy the data I hold about you will include: your personal contact information including your name, date of birth, email address, contact phone number and your GP details. I will also hold therapy notes and letters or reports written by myself or any other health provider concerning your treatment with me. If you are using private healthcare insurance, I will hold your insurance policy and authorisation code.

How is data stored and for how long?

Your data will be used for the provision of my services.  When you agree to my privacy policy you are consenting to me processing your data for the purposes stated.  You have the right to withdraw your consent at any time by contacting the email address or telephone number on this website.

Any information relating to you, e.g. personal data, therapy notes and correspondences, are stored securely on my electronic and mobile devices. These devices are protected with a passcode and relevant antivirus software where appropriate. Any handwritten notes are kept securely and anonymously in a locked filing cabinet in my domestic property.

I keep data related to your treatment for up to six months after the therapy has ended in line with indemnity insurer guidelines.  After six months your data will be safely destroyed.

Why is data collected?

I collect data so that I can provide psychological therapy to you. I may also use your data to contact you between appointments if needed by phone, text or email. Your data may also be used to provide reports or other information concerning your treatment to referring agents, insurance companies, or other professionals involved in your care. I will not share your data with anyone without first receiving your explicit consent.

Do you sell or share data?

I do not sell your data to anyone. I will not share your data with anyone unless you give express permission for me to share information with your GP or another healthcare professional or provider involved in your care. If you are using a private healthcare provider they may request reports or letters to be written and shared with them, but I would only do this with your explicit consent.

What takes place in therapy in strictly confidential. There are, however, some exceptional circumstances where confidentiality may be breached, even without your permission. For example, If I feel that you are a danger to yourself or to others, or if there is sufficient evidence to raise concern of the health, welfare or safety of children or vulnerable adults. If this is the case I will first encourage you to access support from an appropriate source. If I feel you are unable to do this I will make this contact myself with the relevant professional or agency, but I will inform you of this first before passing on any information about you. If you are unable to make rational decisions regarding your safety or the safety of others I may not be able to discuss the breach in confidentiality with you beforehand.

I receive regular clinical supervision as part of my commitment to good clinical practice and in line with guidelines outlined by the British Psychological Society (BPS) and Health and Care professional council (HCPC).

How can I access the data you hold about me?

Under the Data Protection Act 2018 you have a right to access the data I hold about you. If you wish to do so please submit a written request to me via letter or email. I will respond within 30 days of receiving the request. You can also request that I amend or alter any information I hold about you.

My site may contain links to and from other websites.  Please be aware that these websites have their own privacy policies and that I do not accept any responsibility or liability for their policies.  Please ensure you check their policies before you send any personal data to these websites.