Privacy Policy

Last Updated: 30th November 2024 At [Your Practice Name], we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and store your personal data when you use our services or visit our website ([Website URL]). By accessing our website or engaging with our services, you agree to the practices described in this policy.

1. Who We Are

• Practice Name: [Your Practice Name]
• Address: [Your Practice Address]
• Email Address: [Your Email Address]
• Phone Number: [Your Phone Number]
• Data Controller: [Your Name/Practice Name] is the data controller responsible for your personal data.

2. What Data We Collect

We may collect and process the following types of personal data: a. Personal Information:

• Name
• Email address
• Phone number
• Address (if applicable)

b. Sensitive Data:

• Health information you provide during therapy sessions
• Emergency contact details

c. Technical Data (via the website):

• IP address
• Browser type and version
• Cookies (see our Cookies Policy [insert Link])

3. How We Use Your Data

We use your personal data for the following purposes:

1. To Provide Therapy Services:
   • To schedule appointments and communicate with you.
   • To deliver personalized therapy sessions.
2. To Comply with Legal Obligations:
   • To maintain records as required by professional accreditation bodies (e.g., BACP, UKCP).
   • To safeguard you or others in cases of risk or harm.
3. To Improve Our Website:
   • To analyze website usage and enhance user experience.

4. Legal Basis for Processing

We process your data based on one or more of the following legal grounds:

• Consent: When you provide explicit consent to process sensitive data.
• Contract: To fulfil our obligations when you engage our services.
• Legal Obligation: To comply with applicable laws and regulations.
• Legitimate Interests: To improve services and ensure website functionality.

5. How Long We Keep Your Data

We retain your personal data for the following periods:

• Therapy Records: Retained for [e.g., 7 years] after the conclusion of services, as recommended by professional guidelines.
• Website Data: Retained for [e.g., 12 months].

After these periods, your data will be securely deleted or anonymized.

6. Sharing Your Data

We do not sell or share your personal data with third parties except:

• When required by law (e.g., safeguarding authorities).
• When using trusted third-party providers to deliver our services (e.g., appointment scheduling platforms).

These providers are bound by strict confidentiality agreements and data protection regulations.

7. Your Data Protection Rights

Under the UK GDPR, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct incomplete or inaccurate data.
• Erasure: Request the deletion of your personal data (“right to be forgotten”), subject to legal obligations.
• Restriction: Request limited processing of your data.
• Objection: Object to the processing of your data in certain circumstances.
• Data Portability: Request your data in a portable format.

To exercise these rights, contact us at [Your Email Address].

8. Security of Your Data

We take reasonable measures to protect your data from unauthorized access, alteration, or loss. This includes:

• Secure storage of physical records (e.g., locked cabinets).
• Encryption and password protection for digital files.
• Regular audits of our data security practices.

9. Cookies

We use cookies on our website to enhance user experience and analyze site traffic. For more details, refer to our Cookies Policy [insert link].

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these websites. Please review their privacy policies before submitting any personal data.

11. Complaints

If you have concerns about our use of your data, please contact us first at [Your Email Address]. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

12. Changes to This Privacy Policy

We may update this policy from time to time. Any changes will be posted on this page with a revised “Last Updated” date. Continued use of our services or website constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: [Your Email Address]
• Phone: [Your Phone Number]
• Address: [Your Practice Address]