Privacy Policy

Dr Louise Ennew, a clinical psychologist providing psychological treatment services at The Eaves, 3 Paris, Parklands, Railton Road, Guildford, Surrey, GU2 9JX. 

Dr Louise Ennew takes your privacy very seriously and this privacy policy outlines the personal information that she processes about you.  Dr Louise Ennew complies with both the Data Protection Act 1998, and also the European General Data Protection Regulations 2018.
Dr Louise Ennew acts as the data controller and is registered with the Information Commissioner's Office. If another party has access to your data she will tell you who they are, what they are doing with your data and why she needs to provide them with that information. Dr Louise Ennew’s ICO registration number is: ZA771123

This policy describes what happens to your information when you contact her, use her services or when she contacts you.

If you would like further information or have concerns regarding your data, please contact Dr Louise Ennew (louise.ennew@gmail.com)

Why does Dr Louise Ennew need to collect your data?
She needs to collect information about you so she can:        
    •    Know who you are so that she can communicate with you.
    •    The legal basis for this is legitimate interest.
    •    Provide services to you. The legal basis for this is the contract she has with you.
    •     Processing your payment for services. The legal basis for this is the contract she has with you.

What information does she collect?
In order to provide her services, Dr Louise Ennew connects the following information about you:
    •    your name and date of birth.
    •    your contact details including a postal address, telephone number, ethnicity, email contact and your GP details.
    •    She may also collect information about you from third parties, for example where she receives a referral from another healthcare professional.

Does she use the information that she collects?
    •    The data that she collects from you allows her to communicate with you regarding appointments. For this she requires your name and contact details.
    •    To create the invoices she uses your name, address, date of birth and email address.
    •    In order to process your payment she uses your name and sometimes your address.
    •    Clinical notes that are made during and after therapy sessions, cancellations and other communications between yourself and Dr Louise Ennew.

Where does she keep the information?
    •    Paper records are stored in a secure locked filing cabinet in her home office that only Dr Louise Ennew has access to. The majority of notes are now electronic.
    •     Dr Louise Ennew is transfers all paper records to digital.
    •     Computer records are stored on personal computers that are password protected. Clinical notes are stored on Nebo and One Drive. 
    •    Telephone numbers are not stored on her mobile phone. The number will appear on the call history, however this will not be linked to your name or other identifiable information. The phone is protected by a pin number that only Dr Louise Ennew has access to. If your phone number does need to be stored, for example due to frequent contact regarding risk, this will be discussed with you and only initials will be used. 

How long she keep the information?
    •     Contact information is kept for a period of six months if you do not become a client. After this time your information is permanently and securely deleted.
    •    Medical records are kept electronically for eight years, after which time they are permanently and securely erased. This is inline with guidance issued by NHS England, Records Management Code of Practice, 2021.
    •    Electronic invoices are kept for seven years which the length of time required by HMRC.

Who does she send information to?
    •    She sends information to you and anyone she is required to by law to inform. All information that is sent electronically will be sent as an attachment that is password protected. Passwords are sent in separate emails.

How can I see all the information she has about me?
    •    You can make a subject access request (SAR) by contacting Dr Louise Ennew. She may require additional information so that she can verify who you are. In some circumstances she may withhold such personal information as is permitted by the law. This means that she may not provide information if she considers that providing such information will violate your vital interests.

What if my information is incorrect?
    •    In this instance please contact Dr Louise Ennew. She may require additional information so that she can verify who you are. If you wish to have your information corrected, you must provide her with the correct data.

How can I have my information removed?
    •    If you wish to have your data removed, Dr Louise Ennew will have to determine if she needs to keep the data, for example if HMRC require the information to be kept. If she decides that the information should be deleted, she will do so without delay.

She sent emails to you?
    •    As part of her service to you she will send information to you via email. If your appointments are online via zoom, she will send zoom links to you via email.

Does anyone else have access to my data
    •    Bank account statements are sent to her accountant once a year for accounting purposes. The accountant is also bound by GDPR. The accountants used are: Milne, Eldridge & Co, The Little House, 88a West Street, Farnham, Surrey, GU9 7EP.

Signing terms and conditions/GDPR
    •     When you sign the terms and conditions you are confirming that you have seen a copy of this GDPR policy and that you consent.