Privacy Policy

PRIVACY POLICY – FORENSIC PSYCHOLOGY SERVICES

This privacy policy explains how your personal data is collected, used and protected by Dr Kerri Garbutt, Consultant Forensic Psychologist (“we”, “us”, “our”) when providing therapy, supervision, reflective practice, consultancy and training services.

Data Controller: Dr Kerri Garbutt (Forensic Psychology Services)

Contact (Data Protection): contact@forensicpsych.co.uk

Effective date: October 2025

1) Personal Data Collected

We may collect the following information:

• Identification & contact: name, email, phone number, referral details.

• Clinical information: background history, session notes, risk/safeguarding information (for therapy or clinical supervision).

• Professional information: role, employer, case material (for professional supervision, consultancy or reflective practice).

• Administrative data: appointments, invoices, payments (no card details stored).

• Website/communications: emails and basic site analytics/cookies where used.

We only collect information necessary to deliver psychological services or respond to enquiries.

2) Legal Basis for Processing (UK GDPR)

Processing is based on:

• Contract (Art. 6(1)(b)) – to provide services requested.

• Legitimate interests (Art. 6(1)(f)) – to manage the practice, secure systems, respond to enquiries.

• Legal obligation (Art. 6(1)(c)) – safeguarding or record-keeping duties.

• Consent (Art. 6(1)(a)) – where explicit consent is required.

For special category data (health data), processing is under Art. 9(2)(h) (health care) and Art. 9(3) (duty of confidentiality). In non-clinical work, we may also rely on explicit consent (Art. 9(2)(a)).

3) How Data Is Used

• To provide therapy, supervision or consultancy

• To maintain records in line with HCPC/BPS standards

• To arrange appointments, billing and administrative tasks

• To respond to professional enquiries

We do not use data for marketing or share it for unrelated purposes.

4) Confidentiality & Safeguarding

All information is treated confidentially. Data may only be disclosed without consent if:

• There is a serious risk of harm to self or others

• Required by law (e.g. safeguarding, court order)

Whenever possible, concerns are discussed with you first.

5) Data Sharing & Processors

We may use secure third-party processors (e.g. email, cloud storage, practice software). These providers are bound by confidentiality and data protection agreements. We do not sell or transfer data to third parties for marketing.

6) International Data Transfers

Some processors may store data outside the UK. Where this occurs, appropriate safeguards (such as adequacy decisions or UK IDTA safeguards) are in place.

7) Data Security

We use appropriate technical and organisational measures (e.g. secure passwords, encrypted devices, restricted access) to protect personal data from unauthorised access, loss or misuse.

8) Data Retention

• Therapy/clinical records: retained for 7 years after last contact (or longer if required).

• Supervision/consultancy records: typically 7 years after last contact.

• General enquiries: retained for up to 24 months.

• Financial records: retained for 6 years for tax purposes.

Records are securely destroyed when retention periods expire.

9) Your Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request erasure or restriction (where legally applicable)

• Object to processing based on legitimate interests

• Withdraw consent (where applicable)

Contact: contact@forensicpsych.co.uk

10) Cookies & Website

This website may use minimal cookies or analytics to maintain security and performance. You may control cookies through your browser. We do not use intrusive advertising or marketing cookies.

11) Complaints

For concerns about data use, please contact us in the first instance. You may also contact the Information Commissioner’s Office (ICO) in the UK.

12) Updates to This Policy

This policy may be updated periodically to reflect legal requirements or service changes. The most recent version will always be available on this website.