Booking App Data and Security

BACK TO MAIN INDEX

We have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data breach where we are legally required to do so. We have clear policies for our staff on how to identify and respond to any breach and a separate Data Security Policy. We have insurance cover in relation to any breach.

We do not transfer any of your personal information to countries which do not have adequate data protection standards with the exception being transfers to our employees who meet the requirements of GDPR. The European Commission makes the decisions on the adequacy of the protection of personal data in third countries and have decided that personal data can flow safely between countries in the European Union, the European Economic Area (EEA), and 12 other territories without any further safeguards being necessary.

Your data is securely stored by AWS (Amazon Web Servers) in the UK and is encrypted end to end between yourself and AWS when data is transmitted. We also utilise a “Secure Socket Layer” (SSL Certificate) using RSA encryption.

We retain your clinical record by reference to the IGA Records Management Code of Practice for Health and Social Care guidance for managing health records and to support our legal obligations to be accountable for your care. When the retention period detailed in the guidance expires we will delete all record of your relationship with us from our servers where it is securely stored. The booking app does not share or sell any information with/to third parties. Details of who does have access to your information in relation to your treatment and management of our relationship is fully detailed in our Privacy Policy.

On occasion, we may use fully anonymised information for research purposes. It will not be possible to identify you from this information. If you would prefer that we did not use your anonymised information then please contact us to that effect.

We store certain cookies from your use of the booking app for various reasons and a full explanation of our use of cookies can be found within our Privacy Notice and Cookie Policy. The policy also explains how to control/delete cookies. The booking app takes care to ensure that only the right people have access to your personal data. We have procedures in place to safeguard your privacy and anyone within the booking app receiving or having access to information about you will be under a legal duty to keep it confidential.

All access to the booking app platform is controlled by passwords personally selected by our clinicians, therapists and staff. No generic passwords are used. These passwords can be changed at any time by our staff and, at regular intervals, there will be a forced change of passwords. Your access to your information is also controlled by a personally selected password which you can change at any time if you are concerned it has been compromised. You will only receive one “notification” from us and that is when your clinician / therapist calls you to begin your appointment. If you wish you can ensure that notifications do not appear on your device when using one of the mobile apps by following these guides:

• iOS - Change notification settings on iPhone
• Android - Control notifications on Android

If you disable notifications you will need to be logged in to the booking app platform or mobile applications in order to be able to join your appointment when your therapist calls you. The booking app platform will only display a notification if you are logged in to the booking app platform using a laptop or desktop computer and have it open on your screen.