Privacy Notice

This privacy notice tells you what to expect CM Diverse Therapy to do with your personal information.

Contact details:

Carmen Muresan, trading as CM Diverse Therapy

Email: carmen@cmdiversetherapy.co.uk

ICO registration number: ZB988094

What information I collect, use, and why:

I collect or use the following information for providing and managing psychotherapy services:

Names and contact details
Date of birth
Client registration and assessment information
Client records and therapy notes
Financial transaction information
Correspondence
GP and emergency contact details, where appropriate
Parent or carer details, where relevant

I also collect or use the following special category information where relevant to providing psychotherapy. This information is subject to additional protection due to its sensitive nature:

Health information
Racial or ethnic origin
Religious or philosophical beliefs
Sex life information
Sexual orientation information

Lawful bases and data protection rights

Under UK data protection law, I must have a lawful basis for collecting and using your personal information.

I may process your information where this is necessary to enter into or carry out our therapeutic agreement, for my legitimate interests in providing and managing my psychotherapy practice, to comply with a legal obligation, or where necessary to protect someone’s vital interests.

Special category information is processed where necessary for the provision of health or social care or treatment under Article 9(2)(h) UK GDPR and the relevant provisions of the Data Protection Act 2018.

Depending on the circumstances, your data protection rights may include:

Your right of access
Your right to rectification
Your right to erasure
Your right to restriction of processing
Your right to object to processing
Your right to data portability
Your right to withdraw consent where consent is relied upon

If you make a request, I will respond without undue delay and normally within one month.

To make a data protection rights request, please contact me using the contact details at the top of this privacy notice.

Where I get personal information from

Directly from you
Enquiries made through this website
Parents or carers, where relevant
Referring professionals or organisations, where relevant

How long I keep information

Adult client records are generally retained for five years after therapy ends.

For clients who were under 18 when therapy was provided, records are generally retained for five years after their 18th birthday.

Financial records may be retained for different periods where required for tax, accounting or legal purposes.

Information is securely deleted or destroyed when it is no longer required.

Who I share information with

Clinical supervisors
Professionals or organisations where information needs to be shared for safeguarding or emergency purposes, such as your GP or emergency services
Professional, legal, insurance or accounting advisers where necessary
Other organisations or authorities where disclosure is required by law

Information discussed in clinical supervision is limited to what is necessary and identifying information is minimised wherever possible.

How to complain

If you have any concerns about my use of your personal information, you can make a data protection complaint to me:

Email: carmen@cmdiversetherapy.co.uk

If you remain unhappy with how I have used your data after raising a complaint with me, you can also complain to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: ico.org.uk/make-a-complaint