Al-Huda Therapy Privacy Policy
My contact details
Name: Saadia Jabaar (Al-Huda Therapy)
Phone Number:07827 090 897
E-mail: info@alhudatherapy.co.uk
The type of personal information I collect
I currently collect and process the following information:
- Any personal information you give us directly.
- Personal identifiers, contacts and characteristics (for example name, email address, date of birth, mobile or telephone number, relationship status, gender, sexual orientation, financial details, credit/debit card information, details about your education, reasons for contact, details about your past and current health, personal history, your contact preferences and consent and the reason why you believe you need counselling sessions)
How I get the personal information and why I have it
Most of the personal information I process is provided to me directly by you.
Initial consultation
During the initial 15-minute consultation, I will collect information to help me satisfy your enquiry. This will include your name, telephone number, email address, date of birth, your reasons for contact, details about your past and current health, gender, country of residence, your contact preferences and consent and the reason why you believe you need counselling sessions.
Alternatively, a parent or trusted individual may give me your details when making an enquiry on your behalf.
If you decide not to proceed, I will ensure all your personal data is deleted within 6 months from the last contact. If you would like me to delete this information sooner, just let me know.
Initial assessment
During the initial assessment, we'll conduct a comprehensive exploration of your reasons for seeking counselling. This process will encompass an in-depth examination of your history, any health-related concerns, and any other pertinent factors that both you and I may find valuable for our upcoming sessions.
During or after the initial assessment, if we decide not to proceed with counselling sessions, I will ensure all your personal data is deleted within 2 years from the date of last contact. If you would like me to delete this information sooner, just let me know.
Please note, once your personal data is deleted, you will be regarded as a new client. Consequently, you will need to schedule a fresh initial assessment to commence counselling.
While you are accessing counselling
I will keep minimal records of our sessions and anything I believe may be necessary to help me track my work as a therapist and to help the counselling services run smoothly. These details are kept securely which are mentioned further below.
Rest assured that everything you discuss with me is confidential. That confidentiality will only be broken if:
- Where I believe you pose a risk to yourself or others, I reserve the right to breach confidentiality.
- If I become aware of a person's history of child abuse and they are still in contact with children, I am obligated to report this for the safety of the children involved.
- If I believe that sharing information can help prevent or detect a serious crime. This extends to issues related to safeguarding children or vulnerable adults, financial crimes of significant impact, and acts of terrorism. These exceptions are based on legal and ethical considerations aimed at ensuring public safety and well-being.
Whenever possible, I will make efforts to discuss this decision with you and seek guidance from my supervisor, but this may not always be feasible.
After counselling has ended
I am committed to retaining your personal information for no longer than necessary in relation to the purpose for which it was first collected. This is in line with guidance from the Information Commissioner’s Office. I may hold some types of data for up to seven years.
Other reasons for holding personal information
I may also hold personal information for the following reasons:
- Provide you with information, products or services you’ve requested or that I feel might be of interest to you.
- Make my marketing campaigns more targeted and relevant to potential clients and donors; I will only send you marketing information if you have given us specific consent.
- Respond to direct requests where you have contacted me with a query - I will use your personal information to respond.
- Carry out general administrative tasks like dealing with complaints and feedback, essential record-keeping.
- Transact: I will use your personal information to take payments from you when processing orders and payments for goods and services.
- Keep you safe: In the event that I reasonably think you (or someone else) is at risk of serious harm or abuse.
- Improve your experience of my website, so that I may offer you a more user-friendly navigation of my website.
I also receive personal information indirectly, in the following scenarios:
- I store information about how you navigate my website, although this cannot be used to personally identify you.
- I may also collect and store your personal information if you interact with me on my social media channels: Facebook, Twitter, Instagram, Linktree and LinkedIn. This will depend on your own privacy settings on these individual channels, so make sure you check these first.
- Depending on what you do on my website, I may collect and store the following types of personal information: name, email address, date of birth, mobile or telephone number, relationship status, gender, sexual orientation, financial details, credit/debit card information, details about your education and career.
I will only use your personal information for the purposes for which it was obtained in the first place. I won’t share it with any third parties and you won’t receive any communications from other organisations unless explicitly instructed by myself for the reasons below.
There are four very explicit ways in which your data might be shared:
- In the event that I use third party suppliers to help deliver my services, fundraising activities and campaigns. For example, Mailchimp to send out newsletters via email. Additionally, Calendly, who may send out email reminders and booking confirmation emails.
- Where I am legally bound to disclose your personal information, for example, to further criminal investigation
- To keep you safe if I believe you (or someone else) is at risk of serious harm or abuse.
- All members of BACP are mandated to undergo regular supervision. In accordance with these requirements, my work is consistently supervised to guarantee its safety, adherence to ethical standards, and effectiveness. During these supervision sessions, certain aspects of our work may be discussed; however, I uphold strict confidentiality protocols. No full names will be disclosed, and any identifiable details are removed to prevent any breach of confidentiality. Your privacy and trust in our therapeutic relationship are of utmost importance.
When someone visits my website, I use a third party service (Calendly) to collect information that you have entered, for example, contact details, name, gender. This allows you to book in a 15 minute consultation and allows me to gather information in preparation for our booking.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases I rely on for processing this information are:
(a) Your consent. You are able to remove your consent at any time. You can do this by contacting info@alhudatherapy.co.uk
(b) I have a contractual obligation.
(c) I have a legal obligation.
(d) Legitimate interest.
How I store your personal information & data security
I have both digital and operational safeguards to make sure your data is secure. Access to information is reviewed on a regular basis and is only limited to myself.
Any information I record are stored securely on a laptop dedicated solely to my use. This laptop is protected with password access at both the individual document and laptop levels. A backup is also created and stored on the cloud, OneDrive. Additionally, any physical documents are safely locked in a secure cabinet or safe, which only I have the appropriate security clearance to gain access.
For security reasons I do not retain text messages for more than 24 months if its not important. If there is relevant information contained in a text message I will make a note of the important information and update your personal file. Likewise, any email correspondence will be deleted after 24 months if it is not important. If necessary, I will make a note of the important information and update your personal file.
The safety and security of your information also depends on you. Where I have given you (or where you have chosen) a password for access to certain parts of my website or documents, you are responsible for keeping this password confidential. I ask you not to share your password with anyone.
As most of my services will be conducted online via Zoom which is "End-to-end Encrypted", which, when enabled, ensures that communication between all meeting participants in a given meeting is encrypted and private. It's important to note that while the likelihood of security breaches are low, online communications are never entirely secure. I cannot 100% guarantee the security of data handled in this way.
Your confidentiality and privacy are paramount, and I take the necessary precautions to ensure the security of our sessions.
I am committed to retaining your personal information for no longer than necessary in relation to the purpose for which it was first collected. This is in line with guidance from the Information Commissioner’s Office. I may hold some types of data for up to seven years.
For example, in the case of financial transactions like donations and purchases, I will keep your personal information for as long as legally required in respect of tax or accounting purposes, which could be anything up to six years after a transaction has taken place.
I will then permanently delete your information as and when appropriate.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request for any of the above, I have one month to respond to you.
Any requests must be done in writing. Please contact me at info@alhudatherapy.co.uk if you wish to make a request.
How to complain
If you have any questions about this privacy policy or the way in which I handle your personal information, or if you wish to make a complaint, then please visit our complaints page.
If you’re unhappy with my response, you may then raise your concern directly with the Information Commissioner’s Office.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
