UK GDPR – PRIVACY AND DATA PROTECTION NOTICE

In line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as a professional registered with the Information Commissioner’s Office, I am obliged to share the following information regarding how your data is protected.

As a psychotherapist in private practice, I collect the following information:

   • Client name

   • Address

   • Date of birth

   • Phone number

   • Email address

   • GP details

   • Records of attendance and payment

​

What I do with this information.

Storage & Security

The information you provide is stored electronically on my computer and mobile phone. Both devices are password-protected, encrypted, and backed up securely. My computer is used exclusively by me.

​

Usage & Retention

• Contact Details: I use your contact details solely to communicate with you about appointments or respond to enquiries. Once our work together ends, your contact information is deleted.

• Clinical Notes: In accordance with professional indemnity insurance guidelines and data protection laws, anonymised clinical notes are retained securely for 7 years after therapy ends, after which they are permanently deleted.

​

Third Parties & Confidentiality

• Professional Executor: In line with professional practice, your contact details are securely shared with my appointed professional executor, who will contact you only in the event of my death or incapacitation. This data is encrypted, regularly updated, and deleted when no longer required.

• Disclosure & Legal Obligations: I will never sell or share your data for marketing. I will only share your personal data with third parties where legally required (e.g., via a court order) or as outlined in our Therapy Agreement regarding immediate risk of serious harm or unpaid fees.

​​​

Data Protection Enquiries & Complaints

If you have any questions or concerns about how your data is handled, please contact me directly at info@erikamancini.com.

You have a statutory right to raise a data protection complaint with me. I will acknowledge your complaint within 30 days and provide a full response following my investigation. If you remain dissatisfied with the outcome, you have the right to escalate your complaint to the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

​

NB

Please note, my practice operates under the jurisdiction of UK law (England and Wales).

​