Dr Wikholm is registered with the HCPC (as is a legal requirement to practice) and operates under their regulations. This is a summary outlining how your ‘data’ (personal details and records) will be processed in line with the General Data Protection Regulation (GDPR) implemented from 25 May 2018 and explaining why confidential information is held and how it is protected.

It is assumed that by engaging with this service you are consenting to records being kept. 

  • In order to provide the safest care for you or your child, there is a minimum amount of data that will be collected which may include an initial registration form.

  • Record keeping of appointments is an essential component of healthcare. Keeping brief session notes is important in order to facilitate effective treatment and form the basis of any reports needed. It is also a requirement of the governing body (HCPC).

  • Confidential information recorded on paper (such as initial registration forms, session notes and questionnaires) is securely stored in a locked filing cabinet.

  • Confidential information that is provided electronically (e.g. initial registration forms), will be password protected and stored on a password protected computer.

  • Confidentiality is maintained at all times (i.e. your information will not be shared) unless there are exceptional circumstances (e.g. risk of harm to yourself or others). In this instance other services (e.g. GP or police) may be contacted without your consent as this is a professional obligation. Where possible this would always be discussed with you first.

  • Mental health records are subject to special legislation (e.g. children’s records must be kept for the minimum period of 7 years after they turn 18). After this period they will be deleted/destroyed).

  • Confidential information sent by Dr Wikholm via email will be password protected, with the password sent separately.

  • All electronic devices (e.g. computer, laptop and phone) and used to access stored information are password protected.

  • Enquires made via the website are sent securely via email. Once Dr Wikholm has contacted you, your initial email will be deleted. Likewise any further email correspondence via email will be regularly deleted.

  • Right of access: a subject access request (SAR) can be made for copies of yours or your child’s records. If you require these records, please discuss this request with Dr Wikholm, who may need to discuss this with the governing body (HCPC).

  • Requests for information held about you or your child to be deleted would also need to be discussed on a case by case basis and in correspondence with the HCPC.

  • When you/your child finish sessions, or if you put sessions on hold, notes will no longer be taken and no further liaison with other professionals about your case will take place (except where there is serious risk).

  • You will not be emailed with marketing information and your information or details will not be passed onto any third party or organisations.