Privacy Policy

Who we are
I am Dr. Carl Bryce, a Registered Health Psychologist and owner of Bryce Psychology Services Ltd. I am registered with the Information Commissioner’s Office (ICO), registration number ZB833278.

My practice is also regulated and informed by the professional and ethical guidelines of The Health and Care Professions Council (HCPC; registration number PYL042334) and The British Psychological Society (BPS; registration number 414186). You can find out more about my professional and legal responsibilities on their respective websites:

Data Control
Dr. Carl Bryce is the data controller for ‘Dr Carl Bryce’ and ‘Bryce Psychology Services Ltd’.

Your Rights
We are committed to protecting your rights to privacy. They include:

Right to be informed about what we do with your personal data
Right to have a copy of all the personal information we process about you
Right to rectification of any inaccurate data we process, and to add to the information we hold about you if it is incomplete
Right to be forgotten and your personal data destroyed (subject to legal and professional obligations)
Right to restrict the processing of your personal data
Right to object to the processing we carry out based on our legitimate interest

Our Legal Reasons for Processing Your Data
It is necessary, for the purpose of providing psychological services, as a healthcare professional, for us to process your personal data. The lawful basis for processing this information is that it is in our legitimate interest to do so. In addition, the processing of your information may also be required due to legal obligations, for example, in the case of a litigation claim.

The data that we collect about you will also include special category data (for example, concerning your sexual orientation, health, or genetics) which it is necessary for us to process for the purpose of providing you with health or social care or treatment.

In rare occurrences, it may also be necessary for us to process your personal and special category data under Vital Interests. In these circumstances, we would be processing your data in order to protect the life of you or another person, and where you are physically or legally unable to provide consent. All attempts will be made to first process your data under another legal basis.

What Type of Personal Data is Collected and Processed
Upon starting therapy, basic personal information will be collected for contact and identification reasons. During our therapy meetings, an assessment of your psychological health will be completed, and notes will be taken during sessions. These will include personal and sensitive details about your life. On occasions, I may audio record therapy sessions for the purpose of clinical supervision. This data will not form part of your client record and will be discussed with you in advance.

All contacts that you have with the service (including by telephone, video call, email, and letter) and documentation associated with your contact (including letters and reports) will be recorded in writing. This data is used solely for the delivery of a therapy service to you and to meet my professional and legal obligations. Depending on your chosen method of payment, bank account details and/or insurance details may also be collected. Personal data pursuant to my legitimate interests in running the business such as invoices and receipts, accounts, VAT, and tax returns, will also be processed.

Website Access
When you complete an online contact form, we will collect information about you and your internet protocol (IP) address. This is automatically supplied by the website software used to offer the form. All web services that we use are GDPR compliant.

Our website (www.drcarlbryce.com) uses cookies to help us identify and track visitors and their website access preferences. Website visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using this website.

When someone visits this website, the website provider collects standard internet log information and details of visitor behaviour patterns. This information is only processed in a way that does not identify anyone.

Video Conferencing
Your therapy will be provided via Microsoft Teams. This platform is GDPR compliant and end-to-end encrypted. Your session link will be unique to your session.

What We Do with Your Personal Information
We will only use your personal information to provide the services you have requested from us. In addition, your data may be used for statistical purposes (for example, reviewing the number of referrals we have received). If you do not provide the personal information requested, then we may be unable to provide a therapy service to you.

How Your Personal Information is Stored
All client records are securely stored. Paper records will be stored in a locked cabinet until added to the electronic client record. Documents, session notes, and additional information are stored in a secure electronic client record. Any email correspondence will also be stored securely.

Where applicable, any video or audio recordings created for therapy purposes will be transferred to our secure electronic data storage system and deleted following their use in therapy.

How We Ensure the Security of Personal Information
We take your privacy very seriously. All data is held in the United Kingdom. We do not store personal data outside the EEA. All data storage services used are fully EU and UK GDPR compliant.

Sensitive personal data will be sent in a password-protected email attachment. Our email provider is GDPR compliant and uses TLS encryption. We advise our clients to ensure that their email provider supports TLS encryption.

How Long is Information Stored For – Data Retention
Your information is kept for the time necessary to provide the service requested. After this time, your data will be stored for a period of 7 years following the end of your involvement with the service, to comply with legal obligations. In the case of a child under 13, records will be kept 7 years after they reach the age of 18.

Your data will be deleted at the end of the calendar year in which the data retention period ends.

Right to Complain
If you have any feedback or complaints, please contact me. If you believe we have not complied with data protection laws, you have a right to lodge a complaint with the Information Commissioner’s Office (ICO).

For complaints about my professional practice, you can also contact The British Psychological Society and The Health and Care Professions Council.

Acknowledgement
By attending your appointment or making payment, you confirm that you have read and agreed to this Privacy Policy. Please contact us if you have any questions.