Privacy policy

See below for my full privacy policy

11062b_f0cd2b56e86443d68d21b6bc12fe055c_

Welcome to Dr Thomas Mundy Clinical Psychologist’s privacy policy.

The terms ‘Dr Thomas Mundy’ and ‘he’ within this policy refer to Dr Thomas Mundy, Clinical Psychologist, HCPC registered (PYL37681)

Dr Thomas Mundy respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how your personal data is processed when you visit this website (regardless of where you visit it from) or engage in therapy sessions with Dr Thomas Mundy. This policy also explains your privacy rights and protection under English Law.

This privacy policy aims to give you information on how Dr Thomas Mundy collects and processes your personal data. This will include personal data collected:

· In your use of this website, including any data you may provide through this website

· From your interactions with Dr Thomas Mundy via phone or email

· During an online therapy session with Dr Thomas Mundy

This website is not intended for under 18s and this website does not knowingly collect data relating to anyone who is under 18 years old.

Data controller

Dr Thomas Mundy is registered with the Information Commissioners Office (ICO) and is the data controller responsible for your personal data. His contact information is listed below.

ICO Registration number: ZB284434
Postal address: Thomas Mundy / Dr Thomas Mundy Clinical Psychologist
Unit 93186, PO Box 6945, London, W1A 6US
Email address: drthomasmundy@outlook.com
Telephone number: 07511826382

A Clinical Psychologist is required to keep records of the patients they work with. This is a requirement under the terms of their professional registration. It is not possible to offer a service without keeping such records.

If you have concerns about the storage and handling of your personal information you can contact the ICO via www.ico.org.uk

Policy amendments

The policies (privacy policy and cookie policy) listed on Dr Thomas Mundy’s website www.drthomasmundy.com may be subject to change at any time as they are reviewed on a regular basis.

External websites

Through the use of this website it may be possible to access links to other websites which are not owned by Dr Thomas Mundy. When using other websites it is advisable to review their respective privacy policies and only accept them if you agree with them. Dr Thomas Mundy is not responsible for the data collected by external third party websites and does not have control over the data they collect.

The data that is collected

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). In the course of his professional work Dr Thomas Mundy may collect, use, store and transfer different kinds of personal data about you. Information relating to this data is listed below. Dr Thomas Mundy has a legitimate interest for holding such data in order to fulfil the professional requirements of his role and properly perform the functions of his work as a Clinical Psychologist.

Dr Thomas Mundy may obtain and keep personal data including your name (first name, last name, title), date of birth, home address, next of kin (emergency contact) and their relationship to you, your registered GP name/address/contact details, your email address and phone number. Dr Thomas Mundy may also keep information regarding your communication preferences.

Dr Thomas Mundy will also process data for the purpose of communication with yourself. This data may include any information received via text, email, phone call, or other electronic messaging service.

Due to receiving payment for his services Dr Thomas Mundy will store financial transaction data (e.g. card details, method of payment, transaction information) detailing payments to or from you.

Dr Thomas Mundy will also keep sensitive data. This includes written notes from assessment and any subsequent treatment sessions. It may also include information gathered from reports and questionnaire measures. Information received from a health insurance company may also be stored where relevant if you are referred by one.

Dr Thomas Mundy has a legitimate interest in obtaining this information to fulfil his professional role as a clinical psychologist working with you. He will only use your data for the purpose of providing his service as a clinical psychologist to yourself and receiving payment and billing for this service, as well as preventing serious harm to yourself or others.

Dr Thomas Mundy may correspond with your GP or other health professional during the course of your treatment. If you fail to provide personal data where is required by law or under the terms and conditions of the contract Dr Thomas Mundy has with you, or data that is required to offer safe treatment, or you fail to provide relevant data when requested, Dr Thomas Mundy may not be able to offer his services as stated on this website or fulfil the contract he has with you. In this case, he may have to cancel his service and he would notify you of this at the time.

Data may be collected from this website in the form of cookies. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies used, please see the cookie policy on this website.

How long is the data stored for?

Clinical Psychologists are required to store data for a period of up to seven years from the point at which it is collected. After this time the data is destroyed.

Can I request access to my data?

You have the right to request access to your data by making a data access request in writing. You will not have to pay a fee to access your personal data. However, Dr Thomas Mundy will charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, he could refuse to comply with your request in these circumstances.

He may need to request specific information from you to help confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. Dr Thomas Mundy may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

Dr Thomas Mundy will attempt to respond to legitimate requests within one month. Occasionally it will take longer than a month if your request is particularly complex or you have made a number of requests. In this case, you will be notified and kept updated.

Who your information may be shared with

Dr Thomas Mundy does not share your personal information for marketing reasons and takes your privacy very seriously. He does not personally share your personal data unless individuals have a clear business need to view such data. He requires all third parties to respect the security of your personal data and to treat it in accordance with the law. At times it is necessary for Dr Thomas Mundy to share data relating to yourself. Occasions where your information may be shared are outlined below:

All Clinical Psychologists receive supervision (from another Clinical Psychologist) to monitor their effectiveness and ensure they are delivering appropriate care. Within supervision Dr Thomas Mundy may discuss aspects of aspects of your care and treatment confidentially with his supervisor to ensure he is performing his role appropriately. This is a professional requirement of being an HCPC registered Clinical Psychologist. Efforts are made not to share identifying details wherever possible with the supervisor.

In exceptional circumstances your personal information may be shared with your GP, healthcare professionals, government bodies or other relevant authorities (e.g. law enforcement agencies). Such circumstances may be where it is in the public interest, where another healthcare provider needs to know this information, or if there are serious concerns about your own safety or the safety of another individual (adult or child). Such disclosures are normally discussed in advance with yourself unless there is reason to believe that the disclosure to yourself may increase risks to yourself or other individuals.

Dr Thomas Mundy may have to share information for legal reasons with auditors (e.g. HMRC) or insurance providers (where relevant) for the purposes of billing and receiving payment. He may also have to disclose sensitive information in the form of treatment reports to the insurance provider or GP if these are requested by the insurance provider in order for Dr Thomas Mundy to undertake psychological work and receive payment for it.

Dr Thomas Mundy uses Microsoft Outlook to communicate via email. He uses Microsoft OneNote to write clinical notes in sessions and Microsoft OneDrive to store this information securely. Microsoft which is responsible for these products has its own privacy policy which can be read here: https://privacy.microsoft.com/en-gb/privacystatement .

Every effort is made to ensure information is stored securely (see below). Email transmission cannot be guaranteed to be secure or protected from third-party access and therefore confidential information you wish to keep private should be discussed verbally in sessions or via phone. By agreeing to psychological sessions with Dr Thomas Mundy you are agreeing to Microsoft’s privacy policies with regard to his use of OneNote to write clinical notes in sessions and OneDrive to store such information.

Online therapy may involve the use of third party providers such as Zoom or Microsoft Teams. These providers have their own privacy policies and thus you should read them prior to making use of their products with Dr Thomas Mundy. Dr Thomas Mundy is not responsible for these the privacy statements of these providers, the technology they may use, any data they may gather or technological complications arising from use of these providers. Their privacy statements are available on https://explore.zoom.us/en/privacy/ https://privacy.microsoft.com/en-gb/privacystatement . Microsoft’s privacy statements may be subject to change at any time. By using either Zoom or Microsoft Teams you are agreeing to the privacy policies of these respective providers.

In order to use Zoom or Microsoft Teams properly, you must have the necessary hardware, software and reliable internet access. You are responsible for making all arrangements necessary for you to have; (i) downloaded and have access to Zoom or Microsoft Teams and (ii) ensuring your internet connection will allow you to access Zoom or Microsoft Teams and is sufficiently reliable for the duration of the session. Dr Thomas Mundy will not be responsible for delays in commencing sessions or interruptions to sessions caused by problems with computer technology. Dr Thomas Mundy will not financially reimburse or extend a therapy session due to problems with your internet connection or hardware which affect your ability to connect to Zoom or Microsoft Teams.

There is strong evidence to support the effectiveness of psychological therapies such as Cognitive Behavioural Therapy. However, there are a multitude of factors that impact on therapy outcome. While Dr Thomas Mundy is committed to making these sessions supportive and successful, unfortunately he cannot guarantee results given the personal individual nature of mental health and psychological well-being. Dr Thomas Mundy cannot therefore be held liable for the outcome from therapy. If the client has concerns about any aspect of the therapy being delivered these should be discussed with Dr Thomas Mundy in the first instance in order to seek a resolution.

Any health records will be kept for a period of seven years and then securely destroyed in line with data protection law. Clients have the right to access their data and should provide a written request to do so. Equally, if a client is unhappy with any aspect of how their data is stored, they have a right to complain. For further information relating to data protection please see the ‘for the public’ section of the Information Commission Office (ico.org.uk). More information about this is also listed in my privacy policy.

Changes to my information

It is important that the personal data Dr. Thomas Mundy holds about you is up to date and accurate. Please notify him immediately if any of your personal details change whilst you are engaged in a professional relationship with him. Dr Thomas Mundy cannot be held responsible for any failure to notify him of a change in your personal information.

Where is my information stored?

Information that is gathered may be stored on a laptop, external hard drive, in mobile phones, email systems (i.e. Microsoft Outlook), Microsoft Office, Microsoft OneDrive (cloud system) and Microsoft OneNote.

Is my information stored safely and securely?

Dr Thomas Mundy puts in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Dr Thomas Mundy uses an encrypted (password protected) laptop. Information stored in OneNote, OneDrive, Microsoft Office and Microsoft Outlook and an external hard drive is also password protected. His mobile phone is password protected. Any paper documentation produced within therapy will be scanned and uploaded to OneDrive. The original document will then be shredded. Personal information sent via email is minimised. If detailed personal information needs to be sent via email Dr Thomas Mundy will send this in a password protected document. The data you provide backed up regularly to ensure that data is not lost and to ensure information can be recovered if needed.

In the event of any suspected personal data breach we will notify you and any applicable regulator of a breach where we are legally required to do so.

International transfers

Your data is subject to GDPR (General Data Protection Regulations) provision. Where your personal data is transferred out of the UK, a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

Dr Thomas Mundy will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data. US based providers have equivalent safeguards in place.
Where we use certain service providers, we may use specific contracts or codes of conduct approved for use in the UK which give personal data the same protection it has in the UK.

Complaints

Dr Thomas Mundy hope you will never have to complain about the service provided by himself but if you do have a concern please in the first instance put it in writing to him or discuss via email or phone.

Your legal rights

You have the right to:

Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data held about you and to check that that it is being lawfully processed.

Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data held about you corrected, though Dr Thomas Mundy may need to verify the accuracy of the new data you provide to him.

Request erasure of your personal data. This enables you to ask Dr Thomas Mundy to delete or remove personal data where there is no good reason for it being processed. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where he may have processed your information unlawfully or where he is required to erase your personal data to comply with local law. Note, however, that he may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, Dr Thomas Mundy may demonstrate that he has compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing of your personal data. This enables you to ask Dr Thomas Mundy to suspend the processing of your personal data for various reasons. For example if you require Dr Thomas Mundy to hold the data to defend a legal claim or if you want Dr Thomas Mundy to establish the data's accuracy.

Request the transfer of your personal data to you or to a third party. Dr Thomas Mundy will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent at any time where Dr Thomas Mundy is relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, Dr Thomas Mundy may not be able to provide certain products or services to you. He will advise you if this is the case at the time you withdraw your consent.