GDPR & Data Protection Statement

General Data Protection Regulation (GDPR) forms part of the Data Protection Act (2018) and provides you with greater transparency over your personal data, such as data used to identify you. Jason Maiden abides by the terms of GDPR (2018) and has outlined below how your personal data is used and stored. 

Jason Maiden is registered with the Information Commissioner's Office (ICO) - Registration reference: ZB723588

1. How your data is used: 

1. Name: Used to address you - to ensure confidentiality, client notes are assigned a code or symbol. 

2. Email: Used as the primary way to confirm appointments and for general communication. 

3. Phone number: A secondary way to confirm appointments and for general communication (when required). Phone numbers are recorded on the Initial Assessment Form.

4. Address: Used to contact you in writing if required.

5. GP Practice address: Used to contact your GP if required. 

6. Emergency contact number: This may be used if a planned session has been missed and the Counsellor has been unable to contact you by email or phone. This number may be called within seven days of the missed session at the discretion of the Counsellor. 

7. Assessment information: This information is taken at the beginning of our work together. The information is used to assess risk, take notes of any client goals, and to help the Counsellor assess what support you are looking for. 

8. Client notes: Brief notes are made at the end of each session.

2. How your data is stored: 

1. Your name, email, phone number, address, GP practice address, emergency contact number, assessment information, and client notes are all stored securely in a locked cabinet or in a password protected file within the secure and encrypted Kiku system. 

2. All client notes will be assigned a code so your name will never be attached to any client notes, this is to provide anonymity. 

3. Clinical Executor 

As outlined in the Counselling Agreement, I have a clinical executor, Dr Bernice Sorensen MBACP (Accred), who is a registered counsellor. In the event of my unexpected incapacity, illness, or death, Bernice would gain access to clients' securely stored names and contact details. Bernice will only call or email to provide clients with signposting to other services and then will securely destroy your contact details.

4. Additional Information

• Your information will not be shared with any third party (except for exceptions to confidentiality as detailed in the Counselling Agreement), and you have the right to remove personal contact information at any time. 

• Should you want Jason Maiden to delete all contact information please get in touch via: jason.maiden@proton.me  

• Jason Maiden will keep your first session assessment form, signed Counselling Agreement, and anonymised notes for seven years after our final session (your contact details will be removed from these forms after five years or sooner at your request). After seven years, all information will be removed and disposed of securely.

5. Data Protection Complaints

If you have a concern about how I handle your personal information, I want to hear from you.

• How to raise a concern

You can contact me by email (jason.maiden@proton.me). Please describe your concern as clearly as you can, and include any relevant dates or details.

• What happens next

I will acknowledge your complaint within 30 days of receiving it. I will then look into your concern and respond to you without undue delay.

• If you remain dissatisfied

If you are not satisfied with my response, you have the right to make a complaint to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Date: 15th July 2026