Josie Spong is registered with the Information Commissioner's Office (ICO) as a Data controller and complies with the EU General Data Protection Regulations (2018).  She also work in accordance with Professional Guidelines of the Royal College of Speech and Language Therapists (RCSLT) and the Health Care Professionals Council (HCPC). 

This privacy statement sets out how we use and protect any personal data that is provided during the course of working with your child.  

We are committed to ensuring that your privacy is protected.  Should you be asked to provide certain personal data by which you can be identified when using this service, you can be assured that it will only be used in accordance with this privacy statement as set out below: 

We may collect the following information: 

● personal data about your child and you relating to their needs

● further information in relation to reports and updates from other professionals involved in your child's care e.g. therapists, doctors, teachers 

● reports and clinical notes written, following treatment sessions 

This information is gathered for the purposes of: 

● professional, clinical record keeping of client information 

● clinically justifying and evidencing recommendations made

● with your consent, undertaking comprehensive assessments of need and provide therapy intervention, as required 

Without this information: 

● it is not possible to provide services to meet your child's needs 

Your data will be shared with 

● relevant health and service professionals in order to ensure collaborative working to maximise your child's progress 

● where it is required to share information this will be done with your prior consent 

Security 

In order to prevent unauthorised access or disclosure your data is stored using mainstream software providers that meet GDPR requirements for both processing and storing data.

All of our electronic equipment, such as mobile phones, laptops, tablets and recording devices, is protected using passwords

Written information received is scanned securely onto the computer and the paper copy is then destroyed. 

Any formal reports containing sensitive information as well as your child's details and sent by email are password protected for additional security.  

Data Retention  

Any speech and language therapy services records are retained as per the rules of the ICO. 

Your rights under the General Data Protection Regulations 2016 

The right to be informed 

You have the right to be informed about what data is being collected, how and why it is being used and any 3rd parties that rely on the information.  

The right of access 

You may request details of personal information which I hold about you.  This will be done within 30 days of receiving a written request.  

The right to rectification  

If you believe that any information about your child is incorrect or incomplete, please email josiespongSLT@gmail.com as soon as possible. Any errors will be corrected immediately upon receipt of your email.  

The right to erasure 

Where the data is not required for legal or medical record keeping you may request that is erased. 

The right to data portability 

You may request that the data you have provided be transferred to another data controller in a machine readable format.  

The right to object  

You have the right to object to the processing of your data.  Where your data is being processed on the basis of consent it may be withdrawn at any time. 

If you would like to exercise your rights in relation to data processing or make a complaint, please contact me via email at: josiespongSLT@gmail.com If, after that, you consider the matter still unresolved then you have the right to contact the supervisory authority, Information Commissioners Office.