Website: www.dkmalkin.co.uk
Email: admin@dkmalkin.co.uk
Tel: 07921 768475
Lytham St Annes, Lancashire.
DKMalkin is a Psychotherapy Practice that offers psychological treatment for individuals, and clinical supervision for professionals. Bespoke workforce training packages are also available. The sole clinician is Debra Malkin. Debra is an Eye Movement and Desensitisation Reprocessing (EMDR) Europe Accredited Consultant with the EMDR UK Association; an EMDR Europe Facilitator, and a BABCP accredited practitioner supervisor and trainer.
Debra Malkin is committed to complying with the terms of the General Data Protection Regulations (GDPR), a regulation which replaces the Data Protection Act 1998. The aim of the GDPR is to protect and empower all UK and EU citizens' data privacy and harmonise data privacy laws across Europe.
Personal data refers to any information which can identify you, either on its own or combined with any other information. Personal details are collected when you sign a consent form for psychological treatment, such as your name, date of birth, age, telephone number, home address, email address, GP name and address. Other personal information such as family details, lifestyle and social circumstances, goods and services, financial details, employment and education details will be collected during a clinical interview or during the course of your therapy.
DKMalkin may also process sensitive classes of information (also known as Special Category Information) that may include physical and mental health details, sexual life, racial and ethnic origin, trade union membership, religious or other beliefs of a similar nature, offences and alleged offences, health information including medical history, diagnosis and treatment data, as well as financial data (such as payment card details), and transaction data (such as details about payments).
DKMalkin also processes personal data where appropriate about its supervisees, suppliers, business contacts and supervisors. DKMalkin would also require any other information that you provide should you request that a report be written for you.
The information that DKMalkin has on record is what you provide when you sign the consent form at the start of your treatment. Without your signature on the consent form, no treatment can take place. There is an opt-in on the consent form when you commence therapy. Should you wish to withdraw consent for treatment, you can do so at any point. Psychometric tests conducted and data obtained are used for assessment and diagnostic purposes to inform your treatment plan.
DKMalkin processes personal information to enable the clinician to provide health services to patients and to maintain accounts and records. DKMalkin collects this information so that you can be contacted should an appointment need to be changed, or if there is a need to write to your GP, with your express permission.
DKMalkin will only share your information with your permission and after discussion with you. An instance of this would be if you needed a letter or report written to your GP or any other organisation as required. DKMalkin may ask you to sign a separate consent form before any report or letter is written. Your name, date of birth and address will be inserted in the report or letter subject line.
All information held on record is audited, and any letters written on your behalf are protected. If this information is sent by email, the document attached is password protected and the recipient contacted by phone so that they can be told the password. Letters that are posted are always sent by special delivery and need to be signed for on receipt.
The other use of personal information is to fulfil administrative, legal, ethical and contractual obligations as a psychotherapist.
DKMalkin will not share any information about you with other organisations or people except in the following situations:
Where it is necessary to share this information, DKMalkin is required to comply with all aspects of the General Data Protection Regulations (GDPR).
What follows is a description of the types of organisations DKMalkin may need to share some of the personal information it processes, given the above exceptional circumstances:
All information and notes taken during treatment are written onto a ReMarkable notepad, and the notes are then transferred to WriteUpp, a secure package aimed at keeping patient records safe with GDPR-compliant storage and encrypted communication tools built for healthcare. This is completed by the clinician.
DKMalkin takes all reasonable precautions to prevent the loss, misuse or alteration of information that is held. All letters that are written are password protected. Passwords will always be provided separately to you, either by calling you, texting you, or telling you in person. A password will not be sent by email.
All emails sent to you or received from you by DKMalkin will be kept securely. If you need to text the clinician, all texts will be noted, replied to and deleted immediately. Patients are requested to use WhatsApp where possible, as this is end-to-end encrypted.
All psychometric tests are copyrighted, and responses will be scanned and password protected. All notes and documentation will be destroyed eight years after the end of our contact (or until a patient is aged 26 if they were under 18 at the end of our contact). Any known data breaches will be reported to the Information Commissioner's Office (ICO) within 72 hours. You will also be informed immediately should this happen.
DKMalkin does not use Copilot or any form of AI to take minutes. The recording of sessions and the use of AI to transcribe is not permitted. All reports, letters and psychometric reports remain the intellectual property of DKMalkin. Under no circumstances may any part of an email, letter or report be entered into any form of AI, Copilot or chatbot. Clients cannot upload a report into AI. All information and correspondence is confidential, and once entered into AI it is no longer protected - your information, or your child's, can then become public property and can be used by others to create documents or information. If you are unsure of the content of a report, please discuss it with the clinician.
Under the GDPR you have the right to access your personal data, to rectify, erase or restrict your personal data, or object to the processing of your personal data.
You have the right to request access to your files, and this will be provided to you within one month of the date of a request. You would be able to access session notes, and any psychometric scale results will be summarised in a table format, as the raw data forms are copyrighted.
If you would like to see the information DKMalkin holds about you, or would like to correct, update or delete any records, please email admin@dkmalkin.co.uk.
You can contact the ICO via their website www.ICO.org.uk should you wish to request any information from the ICO, or to make a complaint about the way DKMalkin processes your data. DKMalkin's registration number with the ICO is ZC145285, registered 12 May 2026. There is a legal requirement for DKMalkin to hold your files for 8 years, or until a patient is aged 26 if they were under 18 at the end of our contact.
DKMalkin may edit this policy from time to time. If any substantial changes are made, DKMalkin will notify you by sending a copy of the amendments.
Last update: June 2026