Nominated for the BBC Radio 4 All in the Mind Awards (Professional category) 2025
GDPR
Data Protection and Privacy Consent
The following information explains how I am meeting my obligations to you under the GDPR (General Data Protection Regulation). This is the most significant piece of privacy and data protection in twenty years. It took effect on 25th May 2018 and from that date we are required to ensure that we gain a new data protection and privacy consent from all clients. In it (amongst other things) we confirm what information we hold about you and how we are permitted to use it.
.
In accordance with Article 13 ‘Right to be Informed’ of the GDPR I am bound by law to inform my clients:
Who I am and what service I am providing
My name is Dr Tania Thorn and I am a Clinical Psychologist, Family Therapist and Counsellor, registered with the Health Care Professions Council. I provide assessment, diagnosis, psychological therapy and coaching to clients.
Why I need your personal data
As a health professional I am required to keep records of the work I do. I only collect and store information which is relevant to our work together, and which will enhance your care. I am permitted to collect and keep this information by law.
How I will use your data within my practice
I use the data I hold about you to contact you about appointments and to take notes about what we have covered together. This ensures continuity of care and means I am able to provide you a better service.
-
Storage of client material: I use Microsoft Office 365 cloud-based tool to store your personal information and case notes securely. I do not store client identifiable information on computer hard disks.
-
Payment: I accept payment by bank transfer or standing order to my UK bank account, or for clients living abroad, my TransferWise account.
-
Video calls: I use Zoom to conduct our sessions online. All calls are encrypted.
-
Emails: Our initial contact will be via my email address drtaniathorn@protonmail.com . If you wish your communication with me to be encrypted from this point onwards, you can set yourself up with a free encrypted anonymous email account with ProtonMail as this ensures end to end encryption.
-
Appointment scheduling: Initial appointments will be arranged via the email address you provided me when you first got in contact. Note that this is not encrypted unless we are both using Proton mail.
-
Text messaging and phone calls: If you wish to use regular text messages or telephone calls to communicate with me, please note that they are not 100% securely confidential. If you choose to use them please restrict their use to making or changing appointments. If you would like a more secure way of texting or phoning me, we can use Signal. This is similar to WhatsApp but more secure. Let me know if you would like to use this option, otherwise I will assume you are happy for me to communicate with you using your regular telephone number.
-
Questionnaires: I store information from questionnaires in the cloud using Microsoft 365 as before.
How you can modify the data I hold about you
I routinely share with my clients any assessment letters or discharge reports before they are finalised. There is an opportunity to request amendments at that point. If you wish to modify other data that I hold about you, please let me know so we can discuss it further.
How you can access the data I hold about you
You have a right to request to see the data I hold about you. Legally I am required to respond within 30 days. Please contact me if you would like to access your data.
How you can retract consent to hold and process your records
I retain your personal information and health record for 8 years and thereafter they are destroyed. This is in line with UK best practice for adult health and social care records (IGA, 2016). You have a right to retract consent to hold and process your records before that time if you wish. Please let me know if you wish to do so.
How you can raise a complaint
Please note that the work is being undertaken in accordance with the law of England and Wales and any disputes will be subject to it. If you are concerned about the health care I have provided to you, I encourage you to speak to me immediately. If you feel I have done something harmful or unethical and you do not feel comfortable discussing it with me, please contact the Health Care Professions Council.