This privacy notice is to explain what information I collect and hold about you, why this data is collected, who it is shared with and how it is stored.

ICO Registration Reference Number


Organisation Name

Julia Harris
Clinical Psychologist and Psychoanalytic Psychotherapist
I do not have any employees.

What Information I Hold & Why

Personal data is collected from the details you have voluntarily given me and is kept secure and subject to the General Data Protection Regulations 25th May 2018.  Such records are used for the purposes of providing an effective Psychotherapy service [‘legitimate interest’], and for managing and supervising this service.

This is the only purpose for which your personal and sensitive data is collected.

The following personal information is collected:

  • Name
  • Contact information
  • Date of birth
  • Information necessary for clinical purposes including mental health and history and details of your Gp and/or other mental health clinicians.

Psychotherapy treatment inevitably involves the exploration of sensitive personal information including personal and medical history as this is integral to the work of therapy and to provide a framework for understanding the difficulties that have caused you to seek help.

Clinical notes are kept after each session as a record of attendance and treatment progress. These notes will include sensitive personal information, for example family history, personal beliefs and experiences that you have shared with me. These notes are confidential and are not shared with anyone else. The only exception would be if the notes were required by the police or courts in connection with a legal process. You would be notified immediately if this were the case.
As a psychotherapist I have regular supervision with other qualified psychotherapists where your therapy may be discussed. Supervision is to make sure that my work is to the best standard and in these cases all information that identifies you is removed.

Data Security

Personal details are on email communication with you and sensitive information is in handwritten notes. Any reports or correspondence sent by email by me, with your knowledge, will be password protected. Paper notes are kept securely locked at all times when not in use.

Information Sharing – When, With Whom & Why

Data is not shared with anyone except, where necessary and with your prior consent, your GP or Psychiatrist. I will only contact your GP directly in circumstances either where you requested this or where I believe that there is an immediate risk to your health and well-being or where you were unable to give consent in the event of a clinical emergency. Any information shared is strictly on a ‘need to know’ basis.

Any other professionals with whom your information is shared are also subject to GDPR regulations and a duty of confidentiality.

I do not and will never sell your data to any third party.

How long do I keep data?

Your data is kept for 5 years after the end of treatment. After this time any notes and records are destroyed.

What are your data rights?
The GDPR gives you the right to see the information that I hold about you and why. Requests must be made in writing and you will need to provide an indication of what information you are requesting to enable me to locate this in an efficient manner.

I aim to comply with requests for access to personal data as quickly as possible. I will ensure that I deal with requests within 30 days of receipt unless there is a reason for delay that is justifiable under the Data Protection Legislation (GDPR).

I want to make sure that your personal information is accurate and up to date. If you think any information is inaccurate or incorrect then please let me know.