top of page

Privacy Policy

Updated 26 June 2025

Protecting Your Personal Information and Your Trust

Christine Annandale Clinical Psychologist is committed to protecting your personal information and ensuring your privacy when you use this website or access professional services.


This policy outlines how your information is collected, used, stored, and protected, in line with South African privacy regulations, including the Protection of Personal Information Act (POPIA),  and the Health Professions Council of South Africa (“HPCSA”) ethical rules.

Key Definitions (POPIA Section 1)
Personal information: Any information about an identifiable individual.
Special personal information: Health data, mental-health notes, or biometric data.
Data subject: The person to whom the information relates (you).
Responsible party: Christine Annandale Clinical Psychologist
Information Officer: Mrs Christine Annandale, automatically the head of the practice (s 56 POPIA).

Data whe Collect

Christine Annandale may collect the following personal information:

  • Name and contact details (email, phone)

  • Information shared through contact forms, emails, or during therapy sessions

  • Details required for psychological assessments or medico-legal reports

  • Non-identifiable website usage data collected through tools like Google Analytics

Category

Examples

Collection method

Contact details

Name, email, phone

Web contact/booking forms

Administrative data

Appointment history, invoices

Practice management software, emails

Health & therapy notes

Session summaries, assessments

Recorded by the psychologist during/after sessions

Technical data

IP address, browser type, cookies

Analytics & security logs

How Your Data Is Used

Your personal information is used to:

  • Provide psychological services and support

  • Respond to your enquiries or appointment requests

  • Compile assessment or medico-legal reports

  • Fulfil legal and ethical obligations under professional healthcare regulations

  • Practice administration, fraud prevention

 

Providing your personal information is voluntary; however, certain details (such as your name and contact information) are necessary to deliver these services. Your information is processed based on your consent, to comply with legal obligations, or to provide requested services.

Confidentiality & Disclosure

We treat all clinical information as confidential. Disclosure occurs only when:

  • Required by law or court order,

  • With your explicit, written consent,

  • To prevent serious and imminent harm, or

  • In the public interest as defined by the HPCSA.

 
Security Safeguards (POPIA Section 19)

  • Encryption: All electronic records are stored on encrypted drives or cloud platforms with end-to-end encryption.

  • Access controls: Only the psychologist and authorised staff may access health information.

  • Physical security: Paper files in locked cabinets, alarms and restricted office access.

  • Telehealth: Consultations take place on HPCSA-permitted, end-to-end-encrypted platforms; no session is recorded without informed consent.

Data Storage & Retention
  • All records are securely stored on password-protected systems

  • Clinical records and assessment files are kept for a minimum of six years as per HPCSA guidelines

  • After the retention period, records are permanently deleted or securely destroyed

Record type

Minimum retention

Adult client files

6 years after they become dormant

Minors

Until the 21st birthday (18 + 3 years)

Financial/Invoicing

5 years

Once the statutory period lapses, records are securely shredded or permanently deleted unless further retention is justified

Cookies and Analytics

This website uses cookies and analytics tools to improve your experience. These tools collect anonymised, non-identifiable data. You can disable cookies through your browser settings if you prefer.

Your Rights

You have the right to:

  • Request access to your personal data

  • Request correction of inaccurate information

  • Withdraw consent to processing (where applicable)

  • Lodge a complaint if you believe your data is misused. Requests should be sent to annandalepsych@gmail.com with proof of identity.

Third-Party Processors

We share data only with service providers essential to practice operations (e.g., secure email, calendar, practice-management software). All processors sign confidentiality and POPIA-compliant data-processing agreements.

Updates to This Policy

We may amend this policy from time to time. The “Last updated” date changes whenever substantive revisions occur.

To exercise your rights or for any privacy-related concerns, please contact:
Christine Annandale Clinical Psychologist
Email: annandalepsych@gmail.com
Phone: 063 763 7716


If you believe your data privacy rights have been breached, please contact us first.

 

You may also contact:
Information Regulator (South Africa)

Data Sharing and Transfers

Your information will not be sold or shared with third parties except where required by law. Some tools used on this website (for example, Google Analytics and email services) may process data outside South Africa. These providers are required to follow strict data protection standards consistent with POPIA to safeguard your privacy.

bottom of page