Privacy Policy

Emily Jackson’s Privacy Policy

1.0 Introduction

Emily Jackson uses the information collected in accordance with all UK laws concerning the protection of personal data, including the Data Protection Act 1998 and the General Data Protection Regulation (GDPR) 2018. Emily Jackson is the data controller. If another party has access to your data you will be informed if they are acting as a data controller or a data processor, who they are, what they are doing with your data and why they are required to be provided with the information. If your questions are not fully answered please contact Emily Jackson. If you are not satisfied you can contact the Information Commissioner's Office (ICO) https://ico.org.uk. Further details are included at the end of this policy.

2.0 Contact details

Name: Emily Jackson

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

3.0 The type of personal information we collect

Emily Jackson collects and processes the following personal data:

3.1 Therapy clients:

Personal data: basic contact information including name, date of birth, postal address, email address, contact number. Emergency contact details and/or next of kin details, and GP contact details.
Sensitive personal data: Signed Therapy Agreement Form, brief medical history, therapy records (e.g therapist notes, letters, reports, forms and outcome measures).

Web-based enquiry form, we will also collect any information you provide to us as well as your internet protocol (IP) address.  This is automatically supplied by the website software used to offer the form.  All web services used by Emily Jackson are verified by themselves as GDPR compliant.
Third party information: for example, if she receives a referral from another health professional (such as your Doctor or Occupational Therapist). If you are referred by your health insurance provider, then we will also collect, and process personal data provided by that organisation. This includes basic contact information, referral information, and health insurance policy number and authorisation for psychological treatment.

4.0 How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

To communicate with you to arrange and remind you of appointments.
To keep any clinical notes arising from therapy sessions and related cancellations or communications between us.
To conduct a psychological assessment as part of the therapy sessions.
To devise and implement an effective treatment plan and conduct therapy.

To create your invoice we may use your name and email address.

To communicate with relevant third parties to support your treatment and manage any risks which may arise
To create your invoice and process your payment
To send you mailing list emails or email communications regarding key aspects of her business.

Emily Jackson will not share any of your information with others, except in the following circumstances:

She has your permission
If there is a legal requirement
It is in your best interests, such as preventing you from seriously harming yourself.
It is in the public interest, such as if it is necessary to protect public safety or prevent harm to other people.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are: Emily Jackson has a legitimate interest in using the personal data and sensitive personal data we collect to provide health treatment. It is necessary for us to provide psychological therapy to clients.  

5.0 How we store your personal information

Your information is securely stored.

Notes will be taken during and after each individual therapy session which will be kept in accordance with the General Data Protection Regulation 2018 (GDPR). All identifiable information will be minimised where possible so that individual clients cannot be easily identified. Any handwritten notes will be stored in locked filing systems. Any data on portable and/or electronic devices is password protected and stored securely. Emails will be sent and received via ProtonMail, which is an end-to-end encrypted email service.

Email applications use private (SSL) settings, which encrypts email traffic so that it cannot be read at any point between our computing devices and our mail server. Emily Jackson will never use open or unsecure Wi-Fi networks to send any personal data. Emily Jackson’s e-mail provider includes encryptions, however the security of your e-mail provider cannot be guarantees so please be aware of this when communicating with Emily Jackson in this way.

Passwords are changed every 90 days and passwords are not shared.

Emily Jacksons website files are stored on secure UK/EU based servers. No personal information is collected via this website.

6.0 How long is your information stored for

We only retain personal information for as long as is reasonable and necessary for the relevant activity.

In circumstances where someone has received therapy with Emily Jackson, we comply with all statutory obligations relating to the proper time frames for storage of clinical information. As these records form part of your medical history and may be required by you, your doctor(s) or health care team in the future. Emily Jackson keeps all patient electronic records for a full 7 years after your treatment has ended as this is the minimum length of time for records to be retained and then they will be permanently and securely erases. You have the right to ask for your data to be deleted but Emily Jackson does have to comply with this request if there is a legitimate reason for continuing to retain this data (for example possible future legal requests).
During treatment you may have exchanged email communication with Emily Jackson. Once treatment is completed Emily Jackson will permanently delete all emails received and sent.
Invoices are stored for seven years as this is the required length to comply with the HMRC requirements.

7.0 Your data protection rights

Under data protection law, you have rights including:

7.1 Your right of access

You have the right to ask us for copies of your personal information.

You have a right to get copies of your data and can ask to do so in writing by e-mail. Making this request is called a ‘Subject Access Request’ (SAR). You can make a subject access request (SAR) by contacting Emily Jackson. Emily Jackson may withhold such personal information to the extent permitted by law. In practice, this means that information may not be provided if Emily Jackson considers that providing the information will violate your vital interests. If you make such a request Emily Jackson will need a short amount of time to process this request but would expect to be able to send you the information within 30 days.

7.2 Your right to rectification

You have the right to ask Emily Jackson to rectify personal information you think is inaccurate. You also have the right to ask Emily Jackson to complete information you think is incomplete. In order to exercise your right to challenge the accuracy of data and for it to be corrected this should be done in writing. Additional verification will be required to ensure that you are who you say you are to process this request. You should:

state clearly what you believe is inaccurate or incomplete - explain how it should be corrected
where available, provide evidence for inaccuracies

After your data has been corrected in the system, you will be sent a copy of the updated information as described above with SARs.

7.3 Your right to erasure

You have the right to ask us to erase your personal information in certain circumstances. If you want to have your data removed, Emily Jackson will have to determine if the data needs to be kept. If Emily Jackson decides that she should delete the data, she will do so without undue delay.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at This email address is being protected from spambots. You need JavaScript enabled to view it. if you wish to make a request.

8.0 How to complain

If you have any concerns about our use of your personal information, you can make a complaint to me at This email address is being protected from spambots. You need JavaScript enabled to view it.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk