Solent Mind and Southern Health NHS Foundation Trust work in partnership to provide an Improving Access to Psychological Therapies (IAPT) service, under the brand name italk
italk takes your confidentiality and privacy rights very seriously. The information below explains how we collect, process, transfer and store your personal information and forms part of our accountability and transparency to you under the General Data Protection Regulation (GDPR) 2018.
We will process your personal information fairly and lawfully by;
a) Only using it if we have a lawful reason and when we do, we make sure you know how we intend to use it and tell you about your rights;
We do not rely on consent to process your information as a ‘legal basis for processing’. We rely on specific provisions under Article 6 and 9 of the General Data Protection Regulation, such as ‘…a task carried out in the public interest or in the exercise of official authority vested in the controller.’
This means we can process your personal information to provide you with your care without seeking your consent. However, you do have the right to object to the processing of your information but this could have an impact on our ability to provide you with care. It is important to note, that you do not have the right to the erasure of the information, as this was processed under the Public Task legal basis.
b) Only collecting and using your information to provide you with your care and treatment and will not use it for anything else that is not considered by law to be for this purpose;
c) Only using enough of your personal information that will be relevant and necessary for us to carry out various tasks within the delivery of your care;
d) Keeping your information accurate and up to date when using it and if it is found to be wrong, we will make it right, where appropriate, as soon as we can;
e) Only keeping your information in a way that it will identify you for as long as we are legally required to, whilst ensuring your rights;
f) Having secure processes in place to keep your personal information safe when it is being used, shared, and when it is being stored.
Your information is used to guide and record the care you receive and is vital in helping us to;
Professionals involved in your care will also have accurate and up-to-date information and this accurate information about you is also available if you:
Professionals working with you – such as Psychological Wellbeing Practitioners (PWPs), Consultant Clinical Psychologists, italk administrators and any other staff involved in your care – keep records about your support and treatment you receive. This may include:
If you self-refer using our online referral process you will be asked to provide contact details and to complete a medical assessment questionnaire. When you submit this self-referral an automated decision process will be initiated, assessing whether accessing our services this way is appropriate for you. If some of the things you have indicated in your assessment mean it is not appropriate, you will be asked to contact us directly so that we can discuss and complete your referral and agree the best way forward.
Your information will be shared with the team of professionals who are supporting you and are providing treatment to you. However, italk works with partners in the NHS such as your GP, Community Mental Health Teams as well as other agencies, including social services and we may need to share information about you with them. We only do this to provide the most appropriate treatment and support for you or when the welfare of other people is involved. We will only share your information in this way if we have your consent and it is considered necessary.
Our Psychological Wellbeing Practitioners and Therapists also undergo rigorous training from experts. As part of this they may, and only with your consent, share a recording of your session so that they can learn and improve.
You have the right to refuse/withdraw your consent to information sharing at any time. Please discuss this with your relevant health care professional as this could have implications in how you receive further care, including delays in you receiving care.
However, a person’s right to confidentiality is not absolute and there may be other circumstances when we must share information with other agencies. In these rare circumstances we are not required to seek your consent. Examples of this are:
Your personal information will only be used for purposes that benefit treatment and care. It will never be used for marketing or insurance purposes.
To help us monitor our performance, evaluate and develop the services we provide, it is necessary to review and share information with NHS England, Department of Health and NHS Clinical Commissioning Groups (CCGs). The information we share is anonymous so you cannot be identified and all access to and use of this information is strictly controlled and kept in accordance with the Data Protection Act.
In order to ensure that we have accurate and up-to-date patient records, we carry out a programme of clinical audits. Access to your patient records for this purpose is monitored and only anonymous information is used in any reports that are shared internally with in our Trust.
Please contact us if you have any questions or wish to opt out of sharing your information with the above.
Everyone working in italk has a legal duty to keep information about you confidential. Anyone who receives information from us is also under a legal duty to keep it confidential.
As well as ensuring you receive the appropriate support and treatment, your record can also provide us with an important source of information when we need to:
Unless we are investigating a complaint you have made, the records we use for the above purposes will not include any of your personal details. Sometimes for statistical, research or training purposes it is helpful to have more details as this can help us to identify particular trends or needs. However we will only use your personal information in this way if you give us your consent.
Information about you will be stored on either IAPTus or SilverCloud, or both depending on the type of support and treatment you need.
The information about you and the treatment you receive from italk are stored on the national IAPTus system as a clinical record, with your consent.
SilverCloud is the system used to enable you to self-refer to access on-line support for Computerised Cognitive Behavioural Therapy – cCBT which provides an interactive programme of support tailored to meet your specific needs. Your information in SilverCloud is also manually transferred to the IAPTus system, by appropriate italk staff, to either create or maintain your clinical record.
We have contracts with the people who provide these systems (Third Party Contractors) to ensure there are robust information security safeguards in place to protect the confidentiality, integrity and availability of your personal confidential information. The security controls adopted by italk are influenced by a number of sources including National Guidance, NHS Digital and other Government Standards, in line with the Data Protection Act. Southern Health NHS Foundation Trust is also accredited to Industry Standard ISO27001 which is an internationally recognised information security framework.
All staff should adhere to a confidentiality agreement as part of their employment contract with italk and all staff must comply with the various security operating procedures depending on their method of working. Any breach of these is treated seriously, and could result in disciplinary action, including dismissal.
In accordance with the Data Protection Act, principle 7, any transfer of information about you is completed in an approved secure method. A Privacy Impact Assessment2 has been completed and approved to ensure the privacy of your information is maintained at all times.
All records held by the NHS are subject to the Records Management Code of Practice for Health and Social Care Act 2016 (the Code).The Code sets out best practice guidance on how long we should keep your patient information before we are able to review and securely dispose of it.
You have a right to see the information we hold about you, both on paper or computer, except for information that:
Details on how you can access your personal information can be found on our italk website
All applications for access to your clinical record must be made in writing and sent to:
Black Horse House,
8 - 10 Leigh Road,
italk encourage anyone who is not satisfied with the italk service to tell us so that we can investigate and respond to you in an effective and timely manner, and to try to put things right if we can. To do this, please contact:
In writing: italk Service
Black Horse House,
8 - 10 Leigh Road,
By email: firstname.lastname@example.org
By phone: 02380 383920
We also have a leaflet available on our website which tells you what our complaints procedure is.
Southern Health NHS Foundation Trust: Sterne 7, Sterne Road, Tatchbury Mount, Calmore, Southampton SO40 2RZ - The Data Controller for your information
Solent Mind, Registered Office: 15-16 The Avenue, Southampton, Hants. SO17 1XF
Southern Health NHS Foundation Trust, Freedom of Information: email@example.com telephone: (023) 8087 4662