Privacy Policy

Use of your personal information

Your information is securely kept by DHC. Clinical records are kept on our purpose built, secure, Electronic Record System (IAPTUS) and access is restricted to those with authorised access and levels of access are based on staff roles.

Information sharing

We only share information outside of DHC with your consent. This often requires us to get your written consent to provide information to third parties (for instance, insurance companies or solicitors) but can also be implied consent (for instance, when we have agreed with you about a referral to another service or for a test). As an NHS service we have a duty of care to protect peoples safety, therefore essential information may be shared with relevant services (e.g your GP) on a need to know basis if there is a risk to self or someone else. We will always try to discuss this with you first. There are a few extreme situations where we may be required to share your information without consent (for example, a serious criminal offence).

Sharing medical records with Surrey GP Practices

We will not share your Talking Therapies record with your GP. We routinely send GP’s an update letter following assessment and completion of treatment. If you do not wish for your GP to be informed, please do discuss this with us as there are circumstances where this can be agreed. DHC complies with the Data Protection and Access to Medical Records legislation. If you have any questions about the use of your personal information then please contact Karen Gibson, Governance & Quality Manager.

General Data Protection Regulation (GDPR) 2018

Data Protection Act 2018 came into force on 23 May 2018, the Data Protection Act 2018 (DPA) received royal assent and became UK law. The DPA implements the EU’s General Data Protection Regulation (GDPR), while providing for certain permitted derogations, additions and UK-specific provisions. As a result we have updated our privacy policies, which can be accessed below: