Privacy Policy

Last Updated: 08/12/2024

At Dr Taruna Jamalamadaka - Clinical Psychology Services, we are committed to safeguarding your privacy and ensuring that your personal information is protected. This Privacy Policy outlines how we collect, use, store, and protect your data when you use our online clinical psychology services. By using our services, you agree to the collection and use of information in accordance with this policy.

1. Introduction

This Privacy Policy applies to all users of our online clinical psychology services, including our website, mobile app, and any other platforms through which we offer our services (collectively referred to as "our service"). We respect your privacy and are dedicated to providing a safe and secure environment for your mental health treatment. This policy explains our practices regarding the collection, use, and sharing of personal information.

2. Information We Collect

We may collect and process the following types of personal information from you when you use our services:

Personal Identification Information: Name, contact details (email, phone number), address, date of birth.
Health and Medical Information: Medical history, current mental health status, therapy session notes, diagnosis, treatment plans, medications, and other relevant health information.
Session Data: Data from video or audio sessions, including but not limited to session recordings (if applicable), interaction logs, and diagnostic assessments.
Payment Information: Credit card details, billing address, and payment history for services provided.
Technical Data: IP address, browser type, device information, operating system, and usage data to improve the user experience on our platform.
Communication Data: Messages, chat history, emails, or other correspondence with therapists or support staff.

3. How We Use Your Information

We use the collected data for the following purposes:

To Provide Therapy Services: To assess, diagnose, and treat mental health conditions and provide psychological services.
Communication: To communicate with you regarding appointments, reminders, treatment plans, and other relevant information related to your care.
Payment Processing: To process payments for the services rendered.
To Improve Our Service: To analyse usage patterns and feedback in order to enhance the user experience.
Compliance: To comply with legal, regulatory, and ethical obligations as required by healthcare standards and laws, such as GDPR or HIPAA (depending on jurisdiction).
Emergency Situations: If we believe that you or someone else is at immediate risk, we may use the data to contact relevant authorities or individuals who can assist in the situation.

4. Legal Basis for Processing Your Data (GDPR Compliance)

We process your personal data based on the following legal grounds, in compliance with the General Data Protection Regulation (GDPR):

Consent: By engaging with our services, you consent to the processing of your personal data, particularly sensitive health data, for the purposes outlined in this policy.
Contractual Necessity: Processing is necessary to fulfill our contract with you (e.g., providing therapy, billing).
Legal Obligation: We may process your data as required to comply with laws, regulations, and ethical requirements for healthcare professionals.
Vital Interests: In situations where there is a risk of harm to you or others, we may process your data to protect your life or the life of others.

5. Data Retention

We retain your data for no longer than necessary to fulfil the purposes for which it was collected, in compliance with legal and ethical guidelines. Our retention policy is as follows:

Therapy Session Data: We store your therapy notes, assessment data, and other records for a minimum of seven years, in line with legal and professional guidelines for record-keeping in healthcare.
Personal Identification Information: Personal information related to billing and identity will be retained for the duration required by tax, financial, and healthcare laws, typically up to seven years.
Communication Data: Communication records, such as emails or chat logs, may be retained for a period of seven years.
Sensitive Health Data: Health information will be retained for the legally mandated retention period, typically seven years after the last session or as required by local laws.

After this period, we will either anonymise, delete, or securely store your data in a way that ensures it cannot be linked to your identity.

6. Data Security

We take your privacy and security seriously. We implement a range of physical, technical, and administrative measures to protect your personal information, including:

Encryption: All data transmitted over our platform is encrypted using SSL (Secure Socket Layer) technology.
Access Control: Only authorised personnel, such as licensed therapists, administrative staff, and support staff, have access to your data. Access is granted based on necessity and is subject to strict confidentiality agreements.
Regular Audits: We conduct regular security audits and reviews to ensure our data protection measures are effective.
Data Storage: Your data is stored on secure servers located in regions with adequate data protection laws. We take steps to ensure that your data is protected from unauthorised access, alteration, or destruction.

7. Confidentiality and Duty of Care

Confidentiality is at the core of our practice. All therapists and staff members are bound by strict confidentiality agreements and ethical guidelines. This means:

Therapist-Client Privilege: Your therapy session notes, health information, and any other personal data shared during therapy are confidential, except in certain circumstances (see "Exceptions to Confidentiality" below).
Sharing Information: We will not share your personal information with third parties unless:
- You have given explicit consent.
- It is required by law (e.g., court orders, subpoenas).
- We are required to protect the vital interests of you or others (e.g., in cases of suspected abuse or imminent risk of harm).

8. Exceptions to Confidentiality

There are certain circumstances under which your confidentiality may be breached, including but not limited to:

Risk of Harm: If there is an imminent risk to your safety or the safety of others, we may breach confidentiality to notify appropriate authorities or individuals.
Legal Requirements: We may be required to disclose your personal information in response to a lawful request by government authorities or a court order.
Emergency Situations: If you are in a mental health crisis or emergency, we may share relevant information with emergency services or healthcare providers to ensure your safety.

9. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You can request the correction of any inaccurate or incomplete information.
Right to Erasure: You may request the deletion of your personal data, subject to applicable legal requirements.
Right to Restrict Processing: You can request that we limit the processing of your data in certain circumstances.
Right to Object: You can object to the processing of your personal data for marketing purposes or other processing activities based on legitimate interests.
Right to Data Portability: You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format.

To exercise these rights, please contact us at psychology@drtarunajamalamadaka.co.uk. We will respond to your request within the timeframe required by law.

10. Online Safety and Security

Our platform is designed to provide a safe and secure space for online therapy sessions. We encourage all users to follow basic online safety practices:

Secure Login: Use a strong, unique password to access your account, and do not share your login credentials with others.
Video and Audio Sessions: Ensure you are in a private, quiet, and secure environment during therapy sessions. We recommend using a secure internet connection, such as a home Wi-Fi network, rather than public networks.
Session Recordings: If we record sessions for clinical purposes, we will inform you beforehand and obtain your consent. You can opt out of session recordings if you wish.

11. Third-Party Services

Our service may contain links to external websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of third-party sites or services. We encourage you to review the privacy policy of any third-party service before sharing personal information.

12. Children’s Privacy

Our services are not intended for children under the age of 18, and we do not knowingly collect or solicit personal information from children. If we become aware that we have collected personal information from a child under the age of 18, we will take steps to delete that information as soon as possible. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we update this policy, we will revise the "Last Updated" date at the top of the page. We encourage you to review this policy periodically to stay informed about how we are protecting your personal information.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our practices, please contact us at:

Email: psychology@drtarunajamalamadaka.co.uk

This Privacy Policy aims to ensure that your experience with our online clinical psychology services is safe, secure, and respectful of your privacy. Thank you for trusting us with your personal and sensitive information. We are dedicated to maintaining the highest standards of confidentiality and data protection, and we will continue to prioritise your privacy as we support your mental health journey.