Privacy Notice

Your privacy

At Donnelly Psychology Therapy I am committed to protecting your personal information and handling it in a safe and responsible way. This privacy notice explains what information I collect, how it is used, and how it is stored, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who I am:
Mr Gerard Donnelly
Psychological Therapist
Donnelly Psychological Therapy
Email: Donnellypsychologicaltherapy@gmail.com
Location: Central Scotland

For the purposes of data protection law, I am the data controller of your personal information.

What information I collect
I may collect the following information:

  • Your name, address, date of birth, phone number, and email address

  • GP details and emergency contact (if provided)

  • Information about your physical and mental health

  • Session notes and clinical records

  • Appointment and payment information

This information is usually provided directly by you.

Why I collect this information
I collect and use your information in order to:

  • Provide psychological therapy safely and effectively

  • Maintain accurate clinical records

  • Contact you regarding appointments

  • Meet professional, legal, and insurance requirements

Lawful basis for holding your information
My lawful basis for holding and using your personal data is the provision of healthcare and legitimate professional interests. Health information is treated as special category data and is handled with additional care and confidentiality.

How your information is stored
Your records are stored securely using password-protected and encrypted devices and/or secure clinical software. Access is restricted to me only.

Any paper records are kept in a locked cabinet.

Confidentiality and sharing information
Your information is confidential and will not be shared without your consent, except in the following circumstances:

  • If there is a serious risk of harm to yourself or others

  • If required by law or court order

  • If safeguarding concerns arise

  • For my own professional clinical supervision (your identity is anonymised wherever possible)

How long records are kept
Clinical records are retained for 7 years after the end of therapy, in line with professional and insurance requirements, sometimes longer for children. After this time, records are securely destroyed.

Your rights
Under data protection law, you have the right to:

  • Access your personal information

  • Request correction of inaccurate information

  • Request restriction of processing in certain circumstances

  • Make a complaint to the Information Commissioner’s Office (ICO)

Contact
If you have any questions about this privacy notice or how your information is handled, please contact me on:
Email: Donnellypsychologicaltherapy.com

You also have the right to lodge a complaint with the Information Commissioner’s Office at www.ico.org.uk