GDPR Statement

What is GDPR? 

On the 25th May 2018 General Data Protection Regulation (GDRP) legislation comes into effect. GDPR replaces current data protection legislation Data Protection Act 1998.  It is designed to give control back to us as individuals over our personal information and to simplify regulation for business. 

CONTRACT DATA RETENTION STATEMENT: 

The personal data you have provided me with, in order for us to work together, will be used to contact you about appointments and to send resources to you via email.   I will not contact you for any other reason.  I will keep basic records for 5 years after the end of therapy/supervision, or when I last hear from you.  After this time, they will be destroyed. 

You have the right to ask to see the information I hold about you, please ask me at least 7 days before your session and you can view it in a session. You can ask me to change any information that I hold about you that is incorrect. You have the right to ask me to delete information that I hold about you, which I will do save for that which I have a legal obligation to keep – for example, for my business tax purposes. 

INDIVIDUALS RIGHTS 

• Right to be informed                                   
• Right to restrict processing 
• Right to access 
• Right to data portability 
• Right to rectification 
• Right to object 
• Right to erasure 
• Rights related to automatic decision-making including profiling 

The GDPR does not apply to certain activities including processing covered by the Law Enforcement Directive, processing for national security purposes and processing carried out by individuals purely for personal/household activities. 

If you wish to complain about how I handle your data, in the first instance please contact me, Kirsty Woodhead the Data Controller at Journey of You at, kirsty@journeyofyou.uk or 07476906257.  If your complaint is not resolved to your satisfaction, you can contact the Information Commissioners Office at their website or 0303 123 1113.

Last Modified 03.01.24