Privacy Policy
1. Introduction & Who We Are
Welcome to the privacy notice for Stable Psychology UK. We respect your privacy and are committed to protecting your personal data.
For the purposes of the UK General Data Protection Regulation (UK GDPR), the Data Controller is Dr Danielle Evans (HCPC Registration: PYL047969), trading as Stable Psychology UK.
Contact Details:
Email: info@stablepsychology.com
2. The Type of Personal Information We Collect
We currently collect and process the following categories of information, following a referral to the service:
Identity & Contact Data: Your full name, date of birth, address, telephone number, and email address.
Emergency Contact Details: Name and contact information for your next of kin or GP.
Special Category Data (Clinical Records): Detailed health information, psychiatric history, therapy session notes, psychometric test results, and any clinical correspondence (such as GP letters or referral notes).
Financial Data: Payment details and billing history.
3. How We Get the Personal Information and Why We Have It
Most of the personal information we process is provided to us directly by you so that we can communicate with you and provide safe, effective psychological therapy or assessment.
We may also receive personal information indirectly from the following sources:
Health insurance providers or medical referrers.
Your GP or other medical professionals involved in your care.
Lawful Bases for Processing
Under the UK GDPR, the lawful bases we rely on for processing this information are:
1 Contractual Obligation: We process your Identity, Contact, and Financial data because it is necessary to fulfil our contract with you to provide psychological services.
2 Special Category Processing (Health Data): Because we process highly sensitive health data, we rely on Article 9(2)(h) of the UK GDPR. This permits the processing of health data for the provision of health or social care treatment by a regulated professional bound by a legal and professional duty of confidentiality (the HCPC standards of conduct).
4. How We Store Your Personal Information and How Long We Keep It
Your information is securely stored. Electronic clinical notes and contact details are held on a password-protected, encrypted, GDPR-compliant electronic health records system. Any paper files are held in a locked filing cabinet in a secure location.
We only retain your personal data for as long as necessary. In accordance with professional guidelines from the British Psychological Society (BPS) and the Health and Care Professions Council (HCPC), we keep your therapy records and clinical notes for a period of 7 years after the end of your treatment. For minors, records are kept for 7 years after they reach the age of 18.
Once this time period has elapsed, we securely destroy your data by permanently deleting electronic records and cross-shredding any paper documents.
5. Sharing Your Information & Confidentiality
Your information is treated with the strictest professional confidentiality. It will not be shared with third parties without your explicit consent, with the exception of the following limited legal and ethical circumstances:
Risk of Harm: If there is a legal or safeguarding duty to break confidentiality because we believe you or someone else is at imminent risk of serious harm.
Legal Obligation: If we are compelled to disclose information by a court order or law enforcement.
Clinical Supervision: As required by the HCPC, case material may be discussed anonymously with a formal Clinical Supervisor to ensure the quality of care. No identifying details are shared.
6. Your Data Protection Rights
Under UK data protection law, you have specific rights regarding your personal information:
Right of Access: You have the right to ask us for copies of your personal information and clinical notes (known as a Subject Access Request).
Right to Rectification: You have the right to ask us to rectify personal information you think is inaccurate or incomplete.
Right to Erasure: You have the right to ask us to erase your personal information in certain circumstances, though this is restricted by our legal/professional requirements to hold health records for 7 years.
Right to Restriction/Objection: You have the right to ask us to restrict or object to the processing of your personal data in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us using the details provided in Section 1 to make a request.
7. How to Complain
If you have any concerns about our use of your personal information, you can make a complaint directly to us at [info@stablepsychology.com].
You can also complain to the ICO if you are unhappy with how we have used your data:
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk
This short video from the Information Commissioner's Office explains how to use the ICO Privacy Notice Generator if you want to see a demonstration of how they structure compliance documents for small businesses.