Privacy Policy

General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European union that came into effect from 25 May 2018. This document explains how Dr. Felicity Lynagh uses any personal information collected about ‘you’, as a past, present, future service user (client or patient) or when using this website.

Data control

Dr Felicity Lynagh is the data controller for this website and private practice.

What data is processed

In addition to the data you provide within the website enquiry form, Dr. Lynagh will collect a registration form at the initial contact, to know how to best get in contact with you and in case of any emergency. This is necessary to ensure your safety and is our duty of care, within professional guidelines.

Dr. Lynagh also keeps session notes in accordance with guidelines from the professional body. If you are referred by a health insurer or solicitor, Dr. Lynagh will keep information provided relevant to your claim/treatment, including contact information, referral information and a policy number.

Data storage

If you provide a paper copy of the client registration form, these will be stored securely. If an electronic copy is provided, these will be stored on a password protected, encrypted laptop/cloud.

When you submit an enquiry through the website it will be sent securely via email directly to Dr. Felicity Lynagh. The email server used is GDPR compliant. Any emails which come through on Dr. Felicity Lynagh's mobile phone is secured with a password/mobile thumb print/facial identification software. Sending personal information in the body of an email and subject heading of emails is avoided. Any other information, such as session notes and reports are stored on a password protected, encrypted laptop/folder, with anti-virus software and is regularly backed up.

Data retention

Session notes, client registration forms and identifiable information will be kept for the amount of time that is required by our professional guidelines and best practices. After this period they will be deleted/destroyed. Administrative data is retained for up to six years as necessary, in the unlikely event that they are required by HMRC and the VAT commissioner.

What type of personal data is collected and processed

Dr. Lynagh collects information about patients that may include personal or sensitive information, such as:

Personal information: full name, address, telephone number, date of birth, gender (or preferred identity), age, relationship status and children, occupation, email address, GP contact details and emergency contact number.

Sensitive information: medical conditions (if relevant), prescribed medications, psychological history, financial information, including bank account details.

Sensitive personal data: signed therapy client agreement, therapy records (therapist notes, letters, reports) and appointment dates. Your personal data will also be processed by Dr. Lynagh relating to invoicing and receipts, accounts, insurance claims, VAT and tax returns.

Why your data is collected

Personal data is collected to provide psychological treatment, in accordance with the guidelines of our professional governing body. Dr. Lynagh will only use your data for the purposes of providing these services to you and for processing payment for these services.

Who your information might be shared with

Dr. Lynagh takes your privacy and the protection of your data seriously and no information you provide is passed on without your consent. However, there may be circumstances where Dr. Lynagh gains consent to share your information linked to your claim/assessment (ie: a solicitor where an assessment/treatment has been instructed) or for health insurance provider claims to fund therapy (ie: your health insurance provider for the purpose of billing). Dr. Lynagh may also request consent to share information with other agencies/people where we think it would be beneficial to your treatment with your consent to do this.

Therapy sessions are confidential. In exceptional circumstances, Dr. Lynagh may need to pass information on to other agencies/parties without consent. This would be in cases of risk where there is a need to keep you safe, such as serious self harm or danger to life. This also applies when a disclosure is in the public interest (ie: safety of others) or where there is a legal duty (ie: a serious crime has been committed or in the event of a miscarriage of justice). Dr. Lynagh is duty bound to do this by professional guidelines. Whilst Dr. Lynagh is not obliged to gain your consent for this, but will always discuss this with your first (unless doing so would increase the risk to you or another person).

To ensure good practice, Dr. Lynyagh also maintains professional registration via supervision with another qualified professional. Not all cases/patients would be discussed with a supervisor, though if you were to be discussed, full names would not be used and the supervisor would also be compliant with GDPR. Only ‘need to know’ information would be shared, for the purposes of advice and consultation and to ensure you are receiving optimal treatment.

What Dr. Lynagh will NOT do with your personal information

Dr. Lynagh will not share your personal information with Third Parties for marketing purposes.

Your right to access the personal information we hold about you

- You have a right to access the information Dr. Lynagh has about you.

- This will usually be shared this with you within 30 days of receiving a request.

- There may be an administrative fee for supplying the information requested to you.

- Further evidence from you to check your identity will be requested.

- You have a right to get your personal information corrected if it is inaccurate.

- You can complain to a regulator. If you think Dr. Lynagh has not complied with data protection laws, you have a right to lodge a complaint with the Information Commissioner’s Office.

Dr. Lynagh reserves the right to refuse a request to delete a client’s personal information where the information is deemed therapy record. Therapy records are retained for a period of 7 years in accordance with the guidelines and requirements for record keeping by The British Psychological Society (BPS; 2000) [1] and The Health and Care Professions Council (HCPC; 2017) [2].


If you wish to raise a complaint about Dr. Felicity Lynagh's practice you can contact the Health Care Professions Council:

If you think Dr. Lynagh has not complied with data protection laws you can also complain to the Information Commissioner’s Office: