私隱政策 (只提供英文版本)
Privacy Policy (English only)
This privacy policy states how the personal information of the service users is collected, used and stored by me (Mr. Peter Chan, a Registered Practitioner Psychologist of the Health and Care Professions Council; HCPC), who is the independent 'sole trader' of the Peter Chan Psychological Practice (PCPP).
I take your privacy seriously and I am fully committed to ensuring that your privacy is well-protected. Under the General Data Protection Regulations (GDPR) 2018, since I am both the 'data controller' and the 'data processor', I have specific responsibilities and requirements to protect your privacy. In addition, I am bound by the data protection policies of the Information Commissioner's Office (ICO) and the HCPC Standards of conduct, performance and ethics too.
1. The lawful basis of processing personal data
I have a legitimate interest in using your data to answer your enquiry and to provide psychological therapy.
2. Visiting the website and information on cookies
The PCPP website, which is created using the website creator WiX, uses cookies to collect information on how many people have visited and to track visitors' website preferences. Cookies are anonymous and contain no personal data. Click here to view the details of the cookie policy of WiX. You can turn cookies off in your website browser if you wish to.
3. Psychological therapy
I. Data collection and sharing
The data collected is used for three reasons: (i) to provide service (i.e., phone consultation and/or psychological therapy) to you; (ii) to disclose to those who are involved in your care (if indicated); and (iii) to implement safeguarding procedures (if indicated). No data would be shared with third parties for marketing purposes. It is assumed that you are consented to keep your data when you engage with the service.
II. Collecting information from and sharing with you
I collect the following data before the commencement of and during the psychological therapy:
-
Personal data: basic contact information: name, date of birth, address, occupation, email address, phone number, emergency contact information (e.g., next of kin) and GP contact details.
-
Sensitive personal data: physical and mental health, prescribed and non prescribed drug use, relationship or sexual history/orientation, your family, lifestyle, employment, religion or cultural background, relevant reports or documents.
Should I send any confidential mail to you by post, it will be clearly marked confidential.
III. Sharing your information to others
Your data is usually treated in strict confidence. It means normally I will not share any information about you to others unless you are consented to do so. However, there are exceptional circumstances where data would be shared with a third party without your prior consent, due to ethical considerations and legal and professional obligations. In these situations, only necessary information would be shared. Examples of these situations are:
-
When there is need to know information for another health providers, such as your GP.
-
When disclosure is related to public interest, to prevent a miscarriage of justice, or when there is a legal duty such as a Court Order and Child Protection.
-
When risks or safeguarding concerns arise, I will try to discuss such a proposed disclosure with you unless it is believed that doing so could increase the level of risk to you or to someone else.
-
Seeking professional supervision regularly is one of the HCPC guidelines, so that the professional standard could be upheld. In supervision, I would not share your personal identifying information with the supervisor.
IV. Collecting information from and sharing with third party
Only with your prior knowledge and consent, information may be collected from and/or shared with a third party:
-
Other healthcare providers (e.g., GP, psychiatrist and counselor): in order to provide the most appropriate therapy to you, I may obtain information from other healthcare providers involved in your care.
-
Family or friends: in rare situation, they may contact me, providing and asking for information about you.
Should I send any confidential mail by post to the third party above, it will be clearly marked confidential.
V. Data storage
-
All data is stored electronically in a work phone and a laptop, which are password protected.
-
The data comprises of forms, reports, letters (to and from healthcare providers) and session notes. All of these documents would be stored in a GDPR compliant cloud drive.
-
Signal/Whatsapp/Telegram: your name and telephone number would be stored using a non-identifiable code in the messenger apps. You can find the respective privacy policy by clinking here: Whatsapp, Signal and Telegram.
-
Email: your name and email address would be stored in my Protonmail email account. Click here to view the privacy policy.
-
Video conferencing: Whereby is used in our real time online consultation sessions and its privacy policy can be found here. Sessions would be video- or audio-recorded only after obtaining your prior knowledge and consent.
VI. Data retention
All your data will be deleted securely 7 years following the end of psychological therapy, in accordance with the guidelines and requirements for record keeping by HCPC.
4. Enquiry
I will collect your name, email address and telephone number when you made an enquiry. If it involves safeguarding concerns, the data would be processed and stored in the same way as those obtained in psychological therapy. Otherwise, it would be permanently deleted 1 month following the end of the enquiry.
5. Your rights
You always have the following rights. Please contact me if you wish to assert any of them.
-
Right to access: to make a written request for the details of personal information that I hold about you. An administrative fee would be incurred. I may request further evidence from you to check your identity. A printed copy of your personal information will be sent to you by post.
-
Right to rectify: if you believe that any of your information is inaccurate, incomplete or needs updating, please email me the details and I will make the right changes accordingly.
-
Right to erasure: to request your personal information to be erased. However, I reserve the right to refuse this request because I am required to abide with my own professional code of ethics and conduct to keep your personal information.
-
Right to withdraw consent: to withdraw consent to using your personal information. For example, to withdraw consent to call you on telephone and request me to contact you via email instead.
-
Right to portability: to share with other people on any information that is generated from our therapy work together, such as report or letter, if by doing so would be helpful to you.
-
Right to complaint: to lodge a formal complaint at the ICO if you think I haven't complied with the data protection laws. Their helpline is 0303 123 1113.
6. Disclaimer
-
You acknowledge that the privacy of your data and communication can never be completely guaranteed when it is being transmitted over the internet. You acknowledge and agree that you share information via the internet at your own risk.
-
You agree to take responsibility for your own role in safeguarding your data privacy in the email address you choose to use.
-
The PCPP website contains links to other websites (Third-Party websites). Since I am not responsible for the content of these Third-Party Websites, I cannot guarantee their accuracy and completeness.
* Feedback on service
You are always welcome to contact me directly to give your feedback about the service you received from me. I always take your feedback seriously, which is valuable to inform me on how to provide better care to you and others.
** Further queries on privacy policy
If you have any questions or concerns about how your data is collected, used or stored, please do not hesitate to contact me by emailing on peterchanpp@protonmail.com .