General Data Protection Regulation (GDPR)
Who I am
This website address is https://counsellorlaura.com. The data controller is Laura Hollywood.
What personal data I collect
When you first get in touch with me, I ask for your name and contact details such as email address and telephone number this is so I can contact you for future sessions. If you disclose any personal information in our initial contact I will use this to decide whether I am competent to work with you in accordance with the BACP Ethical Framework.
During our work together I will make a note of what we have talked about during our session. This may contain other ‘personal data’ you share such as age, marital status, children, date of birth, gender or occupation and ‘special category data’ such as race, ethnic origin, politics, religion, health, sex life or sexual orientation.
Why I collect it
- so that we can contact you if necessary
- to comply with the recommendations of our professional body and insurance company
The lawful basis on which I use this information
To collect and use data you share, I must tell you which lawful basis I am collecting this data for.
Legitimate interests are the most appropriate lawful basis for both personal (article 6) and special category data (article 9). See ICO website for more details.
How I store your data
Your data will be stored in a fireproof lockable cabinet, on a laptop and mobile phone both of which are password-protected.
How long I will keep your data
I will keep this data for the duration of our sessions together.. When our work together has finished, I will store this data for 7 years. After this time I will delete or securely disposed of it.
I only share data in line with ethical and legal obligations. These are:
- During my supervision sessions when I may talk about our work together. However, only your first name would be used.
- If I receive a Court Order for the release of our notes.
- Where information about a proposed act of terrorism/money laundering/drug trafficking is shared.
- A request by the Police for information regarding a road traffic accident.
- I retain the right to break confidentiality without prior consultation should I consider the urgency of the situation requires me to act
immediately to protect the safety of yourself or others. This complies with vital interests under GDPR, as I am lawfully processing the data in order to protect another person’s life.
You have the right to:
- know what information I hold on you
- access the information I hold – you can request this verbally or in writing at any time. I will provide you with the information within one month.
- have any incorrect information rectified – you can request this verbally or in writing.
- have your records erased (in the defence of any legal claims, I may decline to do this citing the lawful basis of legitimate interests)
- restrict processing (I may decline to do this citing the lawful basis of legitimate interests)
- data portability – e.g. you can request your notes be transferred to another counsellor.
- object to the processing of your data (I may decline to do this citing the lawful basis of legitimate interests)
If you leave a comment on this site you may opt-in to save your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, it will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, it will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
When visitors leave comments on the site the data shown in the comments form, and also the visitor’s IP address and browser user agent string is collected to help spam detection.
Retention of Data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so I can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on this website (if any), I also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where I send your data
Visitor comments may be checked through an automated spam detection service.
For more information:
If you would like to discuss anything in this privacy statement, please contact me.
If you have any concerns about how I have used your data please contact the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF – Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate).