Privacy Notice

This privacy notice makes clear how your personal data is collected, processed and stored securely to comply with the GDPR law of 25th May 2018.

It is important to know that this Privacy Notice applies only to BALLY BE-Practice Owner. I am registered with the Information Commisioner's Office.

This notice applies to counselling clients, or potential clients

I Ensure:
I ensure-data that is ‘absolutely necessary for the completion of duties’ is processed and stored.

I ensure that your data is processed lawfully & fairly in a transparent manner.

I ensure that your data is accurate, secure & where necessary, kept up to date.

I ensure that your data is NOT kept longer than is absolutely necessary.

What kind of data is collected?
Data collected from a private individual (client or potential client):

I collect: your contact details, your gp details and record dates of attendance, Additional data: You may choose to share (either verbally or in writing) data regarding your reasons for counselling, personal circumstances which may include sensitive data. IMPORTANT: I ONLY collect, process and store factual, objective data. This may include sensitive data. Any data you or anyone else chooses to share with me which is outside of this remit, such as subjective opinions, will not be processed and will be securely destroyed. Please note that use of the website contact form informs me of your IP address.

How is data collected?

Data is collected in the following ways:

Direct email.
The online contact form on the website

Data that you choose to disclose in the public arena: Facebook page is done so at your own discretion. I use the Facebook /instagram/whatsapp system, this is at your own discretion.

How is data processed?
Counselling Clients: Your data is processed for the purpose of providing the service required and to notify you about changes to my service. That is, what is ‘absolutely necessary for the completion of duties’. This includes:

Electronic: Emails, invoices

Is the data ever shared? Who else has access to data?

NO!

Privacy and confidentiality in counselling is paramount. I am the only person with access to your data.

In addition to the above your data will only ever be shared if I am required by UK law to do so. Examples include: your involvement in money laundering, drug trafficking, terrorism, serious harm to another, child protection, a court order.

What data is stored?
Our emails, hand written data of record keeping of name and contact details, dates attended. invoicing data. In addition, reasons for counselling, factual health data, factual life event history and your personal circumstances, should this be relevant and appropriate.

How and where is it stored?
Paper storage: kept in a locked file. It includes internal record keeping of name and contact details, dates attended. It may include brief reasons for counselling, health data, factual personal history data and sensitive data should this be relevant and appropriate.

Why is it stored?
It is a requirement of the current Law-GDPR & HMRC.

How long is it stored for?
Data is securely disposed of when it is no longer required following guidance of GDPR for the purpose for which it was collected and retained. The law states that data must be current, up to date, relevant and NOT kept longer than is absolutely necessary.

There are different categories of data which are stored, or retained, for different time periods:
a. Client name, date of attendance, location, fee paid, invoices – stored for 7 years for HMRC legal and auditing purposes – paper records and/or electronic

b. Client and enquiry emails – stored for 6 months

c. Invoicing data – stored for 7 years for HMRC legal and auditing purposes – electronic records

How is data disposed?
Paper data. This is disposed of via confidential waste/shredded
Electronic data is deleted.

The right to ask what is stored and why it is stored.
The right to see your data (it belongs to you). You, as the subject, can request to see your data. The request, called a Subject Access Request must be made in writing. Identification evidence will be necessary. There is no charge and I respond within 30 days, in accordance with the law.

General yet important

Links from this website to other websites: Please be aware that I am not responsible for the policies, data protection, or security of these linked web sites.

This Privacy Notice is a live document. Please come back as it will be reviewed regularly and updated if necessary.

Your data is yours. You are the owner. I consider my temporary use and storage of your personal data very carefully, and I promise that I will continue to do so.

Thank you
Bally Be