Dr Angelica Raine
Psychological Therapies

Privacy Policy

1. DATA CONTROLLER DETAILS
This Privacy Notice explains how Dr Angelica Raine, Psychological Therapies collects,
uses, stores, and protects your personal data.

* Data Controller: Dr Angelica Raine, Private Counselling Psychologist / Sole Trader
* Contact Email: angelica@drangelicarainetherapies.com
* Contact Business Phone number: 07864793721 
* ICO Registration Number: ZB138729

--------------------------------------------------------------------------------
2. WHAT INFORMATION IS COLLECTED
In order to provide therapeutic services and manage practice administration,
the following types of information may be collected:

* Personal Identification: Name, date of birth, home address, email address,
  phone number, emergency contact details, and GP details.
* Financial Information: Billing address, payment details, and attendance/invoice records.
* Special Category Data (Health Data): Therapy notes, clinical assessments,
  psychological history, treatment plans, and risk assessments.
* Technical Website Data: IP addresses, contact form entries, and basic website
  cookies (if accessing services via the website).

--------------------------------------------------------------------------------
3. LAWFUL BASIS FOR PROCESSING DATA
Under UK GDPR, personal data is processed using specific lawful bases:

* Standard Personal Data (Article 6): Processed on the basis of Contract
  (to provide psychological services as agreed) and Legitimate Interest
  (for practice administration, invoicing, and record management).
* Special Category Health Data (Article 9(2)(h)): Processed under the health
  or social care condition for the provision of healthcare or treatment by
  or under the responsibility of a bound health professional.

--------------------------------------------------------------------------------
4. HOW YOUR DATA IS USED & WHO HAS ACCESS
Your data is used strictly for managing your care, arranging appointments,
and maintaining practice administrative records.

* Clinical Confidentiality: Clinical notes and therapy discussions remain strictly
  confidential between you and your psychologist.
* Administrative Support Personnel: To ensure efficient practice operations
  (such as document scanning, filing, password-protected archiving, and financial
  logging), authorised administrative support personnel may assist with non-clinical
  tasks under strict binding Data Processing Agreements and Non-Disclosure
  Agreements (NDAs). Administrative personnel do not conduct clinical work or
  communicate directly with clients regarding therapeutic matters.
* Third-Party Service Providers: Secure, GDPR-compliant software providers may
  be used for encrypted data storage, accounting, web hosting, and practice management.

--------------------------------------------------------------------------------
5. CONFIDENTIALITY & LEGAL EXCEPTIONS
Information shared in therapy is confidential. Confidentiality will only ever
be broken without your consent under exceptional circumstances required by law:
* Where there is a serious, immediate risk of harm to yourself or others.
* Where there is a legal obligation to disclose information (e.g., child
  protection concerns, terrorism, or a court order).

--------------------------------------------------------------------------------
6. DATA RETENTION (HOW LONG RECORDS ARE KEPT)
* Clinical Records: Kept securely for 7 years following the conclusion
  of therapy in accordance with professional guidelines, after which they are
  permanently deleted or securely shredded. (For children/young people, records
  are retained until 7 years past their 18th birthday).
* Financial Records: Invoices and transaction records are retained for 6 years
  in compliance with HMRC requirements.

--------------------------------------------------------------------------------
7. YOUR RIGHTS UNDER UK GDPR
You have specific rights regarding your personal data:
* Right of Access: You can submit a Subject Access Request (SAR) to request
  a copy of the personal data held about you.
* Right to Rectification: You can request corrections to inaccurate personal information.
* Right to Erasure / Restriction: You may request that personal data be erased
  or restricted, subject to statutory health record retention requirements.

--------------------------------------------------------------------------------
8. HOW TO RAISE A CONCERN OR COMPLAINT
If you have any questions or concerns regarding how your personal data is handled,
please contact Dr Angelica Raine directly at angelica@drangelicarainetherapies.com

If you remain dissatisfied, you have the right to lodge a complaint directly
with the UK regulator:

Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113