Privacy Policy

Privacy Notice: Dr Anthony Psychology Ltd

Who I Am:

I am Dr Anthony, Director of Dr Anthony Psychology Ltd. I am a "Data Controller" registered with the Information Commissioner’s Office (ICO). My practice address is Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, G2 1BP.

Why I Collect Your Data:

I collect and process your personal data to:

• Provide psychological assessment and therapy.
• Communicate with you regarding appointments and billing.
• Liaise with your medical team (GP/Cardiologist) where necessary for your health and safety.

The Legal Basis (UK GDPR):

• Contract: To fulfill the terms of our therapy agreement.
• Health Data (Special Category): I process health data under "Provision of health or social care" (Article 9).
• Legitimate Interests: For the effective administration of my business
• Emergency Contact Data: I collect the name and contact details of the emergency contact you nominate.
  
  • Purpose: To ensure your safety in the event of a medical or mental health emergency during our work together.
  • Lawful Basis: I process this data under 'Vital Interests' (Article 6(1)(d)) to protect your life or health, and 'Legitimate Interests' to fulfil my clinical duty of care.
  • Disclosure: This information will only be used if I have a serious concern for your immediate welfare.

What Data I Collect:

• Personal Info: Name, DOB, address, and contact details.
• Sensitive Info: Clinical notes, cardiac health history, and medications.
• Billing Info: Payment records via Square (I do not store your full card details; these are encrypted by the payment processor).
• Emergency Contact Data: I collect the name and contact details of the emergency contact you nominate (see above)

How I Store Your Data: Your data is stored on WriteUpp, a secure, GDPR-compliant Practice Management System. I use Two-Factor Authentication (2FA) to protect access.

• Retention: I keep adult records for 7 years after our last contact.
• Retention (Children): If I work with minors, records are kept until their 25th birthday.

 Who I Share Your Data With I only share your data in specific circumstances:

• Clinical Supervision: Anonymised cases are discussed with my supervisor (Dr Katie Smith).
• Medical Professionals: Your GP or Cardiologist (with your consent, or in a medical emergency).
• Legal/Safety Requirements: If I am legally required to report a safeguarding concern, or if a court orders the release of notes.

Your Rights:

Under the UK GDPR, you have the right to:

• Access a copy of your records (Subject Access Request).
• Ask for errors in your records to be corrected.
• Request that your data be deleted (subject to certain clinical and legal limitations).
• Complain to the ICO if you are unhappy with how I handle your data.

If you have a concern about your data, you are required to contact me first at rebecca.anthony@dranthony-psychology.co.uk.

• I will acknowledge your complaint within 30 days and investigate it without undue delay.
• If the matter is not resolved to your satisfaction, you then have the right to escalate your complaint to the Information Commissioner’s Office (ICO) at ico.org.uk.