General Data Protection Policy (GDPR)
Guy Payne Counselling gathers information in order to enable the provision of counselling and other associated functions. In addition, Guy Payne Counselling may be required by law to share certain information.
Purpose this policy sets out how Guy Payne deals with personal information correctly and securely and in accordance with the Data Protection Act 1998, and other related legislation.
This policy applies to all personal information however it is collected, used, recorded and stored and whether it is held on paper or electronically.
Guy Payne is the only person from Guy Payne Counselling who is involved with the collection, use, processing or disclosure of personal data and he is aware of his duties and responsibilities and will adhere to this policy.
What is Personal Information/ data? Personal information or data is information which relates to a living individual who can be identified from that data, or from that data in addition to other information available to them. Personal data includes (but is not limited to) an individual’s, name, address, date of birth, photograph, bank details and other information that identifies them.
What is Sensitive Personal Data? Sensitive personal data includes information as to an individual’s racial or ethnic origin, their political opinions, religious beliefs or beliefs of a similar nature, whether they are a member of a trade union, their physical or mental health or condition, sexual life, the commission or alleged commission of an offence and any proceedings for an offence committed or alleged to have been committed by them, the disposal of those proceedings or the sentence of any court in such proceedings.
Data Protection Principles The Data Protection Act 1998 establishes eight principles that must be adhered to at all times:
- Personal data shall be processed fairly and lawfully;
- Personal data shall be obtained only for one or more specified and lawful purpose;
- Personal data shall be adequate, relevant and not excessive;
- Personal data shall be accurate and where necessary, kept up to date;
- Personal data processed for any purpose shall not be kept for longer than necessary for that purpose or those purposes;
- Personal data shall be processed in accordance with the rights of data subject under the Data Protection Act 1998;
- Personal data shall be kept secure i.e. protected by an appropriate degree of security;
- Personal data shall not be transferred to a country or territory outside the European Economic Area, unless that country or territory ensures an adequate level of data protection.
Guy Payne Counselling is committed to maintaining the above principles at all times.
Therefore Guy Payne will ensure that:
- Inform individuals why personal information is being collected.
- Inform individuals when their information is shared, and why and with whom unless the Data Protection Act provides a reason not to do this.
- Obtain consent before processing Sensitive Personal Data, even if consent is implied within a relevant privacy notice, unless one of the other conditions for processing in the Data Protection Act applies.
- Check the accuracy of the information it holds and review it at regular intervals.
- Ensure that only Guy Payne has access to the personal information whatever medium (paper or electronic) it is stored in.
- Ensure that clear and robust safeguards are in place to ensure personal information is kept securely and to protect personal information from loss, theft and unauthorised disclosure, irrespective of the format in which it is recorded.
- Ensure that personal information is not retained longer than it is needed.
- Ensure that when information is destroyed that it is done so appropriately and securely.
- Share personal information with others only when it is legally appropriate to do so.
- Comply with the duty to respond to requests for access to personal information, known as Subject Access Requests.
- Ensure that personal information is not transferred outside the EEA without the appropriate safeguards
Complaints relating to the handling of personal information may be referred to the Information Commissioner who can be contacted at Wycliffe House, Water Lane Wilmslow Cheshire SK9 5AF or at www.ico.gov.uk.
This policy will be reviewed as it is deemed appropriate, but no less frequently than every two years. The policy review will be undertaken by Guy Payne who will ensure that the data protection policy of Guy Payne Counselling is GDPR compliant at all times and works in conjunction with Guy Payne Counselling’s safeguarding policy.
If you have any enquires in relation to this policy, please contact Guy Payne