Privacy notice

This notice explains how I collect, use and look after your personal information when you contact me or have therapy with me. I take confidentiality seriously; it's the foundation of therapy.

Who I am

Dr Bobbie Scott (Dr Bobbie Scott Psychology) is the data controller for your information. I'm registered with the Information Commissioner's Office (ICO), registration number CHECK-ICO-NUMBER. You can contact me about anything in this notice at CHECK-EMAIL.

What information I collect

• Contact details: your name, phone number, email address and postal address.
• Information about your health: what you tell me during our first call and in sessions, my clinical notes, any questionnaires you complete, and letters or reports.
• Other details you choose to share: for example about your relationships, background or work, where relevant to therapy.
• GP and emergency contact details, which I ask for in case I'm seriously worried about your safety.
• Payment details: invoices and records of payment. I don't store card details.
• Insurance details, if your sessions are funded by a health insurer.

Information about your health is "special category" data under UK GDPR and is given extra protection.

Why I use it, and the legal basis

• To provide therapy and keep accurate clinical records, as my professional standards require. The legal basis is the performance of our agreement (Article 6(1)(b) UK GDPR) and, for health information, the provision of health care by a regulated professional bound by confidentiality (Article 9(2)(h)).
• To take payment and keep financial records. The legal basis is our agreement and my legal obligations under tax law (Article 6(1)(b) and (c)).
• To respond to your enquiry before we start working together. The legal basis is taking steps at your request before entering an agreement (Article 6(1)(b)).

I never use your information for marketing and never sell it.

Confidentiality and who I share it with

What you tell me stays confidential. I only share information:

• In clinical supervision. Like all psychologists, I discuss my work with a qualified supervisor. I do this without using your name or details that would identify you.
• With your consent, for example with your GP or your health insurer.
• Without consent only where I must: if I believe there's a serious risk of harm to you or someone else, if there's a safeguarding concern about a child or vulnerable adult, or if I'm required to by law or a court order. Where possible I'd talk to you first.

I use a small number of trusted services to run the practice. They act on my instructions and must keep your information secure: CHECK: list them, e.g. email provider, video platform for online sessions, secure clinical notes system, accounting software.

How I keep it secure

Clinical notes are kept CHECK: e.g. in an encrypted, password-protected clinical records system / in a locked cabinet. Devices are password-protected and encrypted. Email isn't fully secure, so please don't send detailed personal or clinical information by email.

How long I keep it

I keep clinical records for CHECK: e.g. seven years after our last contact, in line with professional guidance and my indemnity insurer's requirements, then destroy them securely. Financial records are kept for six years as required by HMRC. If we only had an initial enquiry and didn't go on to work together, I delete your details within CHECK: e.g. six months.

Your rights

You have the right to:

• ask for a copy of the information I hold about you
• ask me to correct anything that's inaccurate
• ask me to delete or restrict your information, where I'm not legally or professionally required to keep it
• object to how I use your information
• ask for your information to be transferred to someone else

To use any of these rights, email me. I'll reply within one month, and there's normally no charge.

This website

This website doesn't use cookies, analytics or tracking, and doesn't collect any information about you. Its fonts are loaded from Google Fonts, which means your browser connects to Google's servers to fetch them.

Complaints

If you're unhappy with how I've handled your information, please tell me first so I can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.