Privacy and legal stuff

Your Sussex Psychologist (YSP) will manage the information we collect from you with great concern for privacy and confidentiality and in accordance with current professional and legal standards. Although the security of your personal data has continuously been addressed by reference to the British Psychological Society's (BPS) Code of Conduct and the Health & Care Professionals (HPCP) Standards of Conduct, Performance and Ethics, the way Your Sussex Psychologist handles personal information has been strengthened and made more transparent by the provisions of the General Data Protection Regulation (GDPR) requirements.

Zubeida Dasgupta is the Data Controller. She can be contacted at info@yoursussexpsychologist.co.uk.

Why do we collect your personal information?

The GDPR requires us to identify the legal basis upon which we process your personal data. We shall proceed with the piece of work you have asked us to do on the basis of (a) our contract with you and (b) our legitimate interest to hold and process your personal data.

Contract - we need to process your personal data to fulfil our contractual obligations to undertake a psychological assessment, intervention, consultation, or training, which you have agreed for us to do. We will process all personal data that you share with us for the purpose of this piece of work and will do so lawfully, fairly and in a transparent manner. This information may be obtained from you, or from relevant others (e.g. referrer, other professionals that help you or that you work with). Our processing of your personal data is, therefore, necessary if we are to fulfil our contract with you. Once we have started the work if you withdraw your consent we will still need to process your data.

Inevitably, these pieces of work involve the processing of special category data

Depending upon the nature of the contract with you, we have a legitimate interest to collect such personal data for the purpose of forming a professional opinion or diagnosis and/or delivering an intervention, consultation, training or supervision. In so doing, we will only collect information that is relevant to the purpose of undertaking piece of work and the associated profiling, advising and reporting.

Your personal data is kept secure on an encrypted lap top, password protected cloud storage and handwritten/typed hard copy. When not in use the hard copy and lap top will be kept in a locked filing cabinet in the practitioner's home.

What data do we collect from you?

Personal data

Personal data means any information capable of identifying an individual. We may process certain types of personal data about you as follows:

Identity Data

Contact Data

Financial Data

Transaction Data

Technical Data

Usage Data

Sensitive data

In order to provide a psychology service to you it will be necessary to process sensitive health data.

Where do we get your data from?

You are likely to provide your data when you contact us via email, phone, postal letters or other methods

As you use YSP website, we may automatically collect Technical Data about your equipment, browsing actions and usage patterns. We collect this data by using cookies, server logs and similar technologies. Please see our cookie policy for further details.

Third parties: We may receive personal data about you from various third parties such as the person who made the referral, or people who support your child (e.g. teacher/ GP/ speech and language therapist). This is likely to include sensitive data.

Who do we share personal and sensitive data with?

Relevant sensitive information will be shared with other professionals (e.g. SALT, school staff, OT, Physiotherapist, Clinical Psychologist, CAMHS professionals, GP, social worker) where this is felt necessary in order to promote your/your child’s best interest. This will be discussed and agreed with you before sharing the information. Relevant data may be shared without your child's or your consent if there are safeguarding or risk concerns. This will be in line with our safeguarding and risk management policies.

It may be in some situations that we are required to share your personal data with:

HM Revenue & Customs, regulators and other authorities based in the United Kingdom and other relevant jurisdictions who require reporting of processing activities in certain circumstances.
Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.

Service providers who provide IT and system administration services (e.g. Zoom, Microsoft, 123-reg).

This Google Website uses cookies, and you can find out about our Cookie Policy here.

You have the right to request to see access and correct your data. You have a right to request that we delete and limit processing of personal data and we will comply subject to safeguarding and risk requirements, fulfilling our contract and legitimate interest. To do this, contact Zubeida Dasgupta at info@yoursussexpsychologist.co.uk. We may have to continue processing your data once the contract has stopped. This is because of our legitimate interest.

For how long do we process your data?

Casework

For children, a hard copy and electronic copy of your notes will be kept during the piece of work and at the end of the work this will be saved as an electronic copy only for a period of 7 years or until your child turns 25 years old, whichever is the longer.

For adults, a hard copy and electronic copy of your notes will be kept during the piece of work and at the end of the work this will be saved as electronic copy only for a period of 7 years. For Video Interaction Guidance (VIG), the film and edited clips will be deleted at the end of the intervention.

Supervision

Typed and/or handwritten notes made in supervision and for VIG, summary reports for assessment and accreditation. VIG supervision notes will be held until your accreditation has happened successfully and then be deleted. General supervision notes will be held for 7 years.

VIG mid point reviews and accreditations

Joint summary report made during an accreditation will be held until it is sent off to you and the AVIGUK registrar has registered you as accredited.

Why do we store your information after the piece of work is finished?

It is in our legitimate interests to store your records for the time specified; a good example is of someone who has mislaid their original assessment report written ten years ago, but who now needs a copy to support their request for reasonable adjustments in the workplace under the terms of the Equality Act, 2010. We might also want to hold your data to support our decision making if ever that is questioned or there is a follow-up assessment/ intervention in the future.

Your rights

In respect to how we process your data, you have certain rights which are explained on the ICO website.

Complaints

If you have concerns about how YSP is handling your data please contact the data processor, Zubeida Dasgupta, info@yoursussexpsycholgoist.co.uk in the first instance, so we can try to resolve the problem together. You also have the right to contact the Information Commissioner’s Office (www.ico.org.uk).

Further Information

This site includes links to other sites which might be of interest. YSP cannot be liable for their content. Users link to other sites at their own risk and use such sites according to the terms and conditions of use of such sites.

Disclaimer and legal stuff

The material on our site and on linked sites is given for general information only, and does not constitute professional advice. You should take specific advice before taking a course of action as we do not accept directly or indirectly any responsibility for loss arising directly or indirectly from reliance on information on this site.

We cannot guarantee that our site and downloads reach you virus-free. You must, therefore, take all appropriate precautions for your own safety.