top of page
GDPR Privacy statement

In order for me, Malena Hallahan CPsychol, to fulfil my responsibilities as a Psychologist I am required to collect certain data about you as my client. Under an identifying code I will also take notes of some assessment information. This can be any relevant medical information and aspects of your personal, social and family history and that you choose to share with me.  


The information retained from you will be kept securely in a password protected and locked external hard-drive.  Your personal data and any our session notes pertaining treatment will be kept in different locations between the time of our session until your file gets transferred onto a secure drive.  Pseudonyms will be used as an identifier for your treatment notes and such will be transferred to the secure drive on a weekly basis. Information/paper files already existing (data collected prior to 25th May 2018) will be kept securely in a password protected safe.


Your clinical records will be stored for 6 years and will then be securely deleted. This is in line with our professional guidelines and as a Chartered Psychologist registered with the British Psychological society and with an active registration with Health and Care Professions Council (HCPC).


Consent to sharing clinical information and personal data

Your data and the contents of the sessions are confidential. The only time that confidentiality would be breached is if I think you are at risk of harming yourself or someone else. Even in such circumstances all attempts to seek your consent will be made first whenever possible.



Depending on your chosen form(s) of contact I will potentially be storing your telephone number and/or email address in my password protected mobile phone.  This is in order to keep a smooth channel of correspondence whilst you are utilising services and at no point will your details be connected with your full name or any clinical information.   If I need to share any sensitive information such as a letter to your GP, Referrer, or insurance company (only when such contacts have been consented by yourself) when sent electronically I will be using a secure and encrypted email server.


Your Rights

You have the right to ask to see any information held by me about you.  To do this just ask me or submit a request in writing. You also have the right to ask for information that you believe to be incorrect and have it rectified. If I become aware of a situation where your personal data has been either accidently or maliciously obtained I will notify you within 3 days.  If you are concerned about the way your information is being held please feel free to discuss this with me. If you are still unhappy you have the right to complain to the Information Commissioner Office.

bottom of page