Privacy Policy

1. INTRODUCTION

This Privacy Policy explains how Camino Mente collects, stores, and processes clients’ personal data in connection with the provision of Cognitive Behavioural Therapy (CBT) services. We take client privacy seriously and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. All information you provide to us is treated as confidential and used only for therapeutic and administrative purposes.

2. DATA CONTROLLER

Joanna E. Susik, on behalf of Camino Mente, acts as the data controller, meaning we determine the purposes and methods of processing your personal data.

3. COLLECTED PERSONAL DATA

As part of providing CBT therapy, we collect the following data:

• Identification Data: name, surname, date of birth.
• Contact Information: phone number, email address.
• Health Data: therapy history, symptoms, therapeutic goals.
• Psychological tests: results of assessments used in therapy.
• Emergency Contact: name and phone number of a person we may contact in a crisis situation.
• Payment Information: details related to payments (bank transfer or cash, but no card details are stored).

4. HOW DO WE COLLECT PERSONAL DATA?

 Your data is collected through:

• Direct communication—via phone, email, or during therapy sessions.
• Forms and psychological assessments—completed at the start or during therapy.
• Email or SMS correspondence related to scheduling therapy sessions.
   

5. PURPOSE  AND LEGAL BASIS OF COLLECTING DATA

We collect personal and health-related data to provide safe, effective, and personalized psychotherapy services. Specifically, we use the data to:

• Deliver tailored Cognitive Behavioural Therapy (CBT) and Acceptance and Commitment Therapy (ACT) sessions based on clients' individual needs.
• Maintain accurate records of therapy history and progress to ensure continuity of care.
• Contact clients for scheduling appointments, therapy-related communication, and responding to inquiries.
• Conduct psychological assessments to guide treatment planning and monitor therapeutic outcomes.
• Ensure client safety by having emergency contact information available in case of a crisis.
• Process payments securely and manage administrative tasks related to therapy services.

We process your data based on:

• Your consent—for processing health-related data and storing therapy-related information.
• Contract performance: to provide psychotherapeutic services.
• Legal obligations, such as record-keeping in line with professional guidelines.
• Legitimate interests—for example, to protect against potential legal claims.

6. HOW LONG DO WE KEEP YOUR DATA?

Your data is retained in compliance with legal and professional guidelines:

• Contact details and therapy records are stored for up to 7 years after the end of therapy (in line with BABCP and professional recommendations).
• Payment records—stored for at least 6 years for accounting and tax purposes.
• Psychological test results are kept for the duration of therapy.

7. HOW DO WE STORE AND PROTECT YOUR DATA
 

We implement appropriate technical and organisational measures to ensure the security of your personal data, including:

• Secure storage: Therapy notes are kept in a locked cabinet (paper copies) and in a secure electronic format.
• Restricted access: Only authorised personnel have access to client data.
• Data encryption and password protection are applied to electronic records.

8. SHARING PERSONAL DATA

We do not share your personal data with third parties, except in the following cases:

• Legal obligations: If required by law (e.g., if there is a risk to life or legal proceedings).
• Service providers: If we use external providers for administrative purposes (e.g., accounting, appointment scheduling), they must comply with data protection laws and sign a Data Processing Agreement (DPA).

9. YOUR RIGHTS UNDER DATA PROTECTION LAW

You have the right to:

• Access your data (Subject Request) Request a copy of the personal data we hold about you.
• Rectify inaccurate data. Correct any incorrect or outdated information.
• Request data erasure (“right to be forgotten") If there is no lawful reason for us to continue processing your data.
• Restrict data processing if you wish to limit how we use your data.
• Data portability: Request that your data be transferred to another provider.
• Object to processing: in certain circumstances.

To exercise any of these rights, please contact us at caminomente@gmail.com

10. COMPLAINTS AND CONTACTING THE DATA PROTECTION AITHORITY

If you have any concerns about how we handle your data, we would be more than happy to support you. Please do not hesitate to contact us first. But if you believe we have violated data protection regulations, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or by phone.

11. CHANGES TO THIS POLICY PRIVACY

We reserve the right to update this privacy policy to reflect changes in legal requirements or our data processing practices. Any updates will be published on our website or made available upon request.

 

For any questions regarding data protection, you can contact us:

📧 Email: caminomente@gmail.com

📞 Phone: 07936 896789