
Effective Date: 26/09/2024
At Hollyhock Play Therapy, we are committed to protecting your privacy and ensuring the confidentiality of any personal data that we collect. This Privacy Policy outlines how we collect, use, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws.
1. Data Controller
The data controller responsible for your personal data is:Lisa Bridger
2. Information We Collect
We may collect and process the following types of personal information from clients:
- Personal Identifiable Information: Name, contact details (email, phone number, address).
- Sensitive Information: Health information relevant to therapy, family background, and any special needs or issues discussed during therapy sessions.
- Session Notes: Detailed notes taken during play therapy sessions, stored securely.
3. How We Use Your Information
We use the personal data we collect for the following purposes:
- To provide therapeutic services to clients.
- To communicate with clients regarding appointments and therapy progress.
- To maintain records for professional and legal requirements.
- For legitimate interests, such as responding to inquiries and managing ongoing services.
4. Legal Basis for Processing
We process personal information based on:
- Consent: When you provide specific consent for us to collect and process your data.
- Legal Obligation: Where processing is necessary to comply with our legal and regulatory obligations.
- Legitimate Interest: Where processing is necessary for the provision of our therapeutic services and not overridden by your rights.
5. Data Sharing
We do not share your personal information with third parties except:
- Where required by law (e.g., safeguarding concerns).
- With your explicit consent, if necessary to coordinate with other healthcare professionals.
6. How We Protect Your Data
We take appropriate measures to ensure that your personal data is stored securely. These include:
- Using encrypted files and secure systems for digital data.
- Locking paper records in secure cabinets.
- Limiting access to your information to authorized individuals only.
7. Data Retention
We will retain your personal data for as long as necessary to provide our services and comply with legal obligations. By law, we are required to retain client data for 10 years after the end of therapy, unless there are legal or safeguarding reasons to keep the data longer.
8. Your Rights
You have the following rights regarding your personal data:
- Access: You can request access to the personal data we hold about you.
- Correction: You can ask us to correct inaccurate or incomplete data.
- Erasure: You have the right to request the deletion of your personal data in certain circumstances.
- Objection: You can object to the processing of your personal data under certain conditions.
- Data Portability: You have the right to request the transfer of your data to another service provider.
If you wish to exercise any of these rights, please contact us using the contact form.
9. Cookies and Website Data
If you use our website, we may collect non-personal information through cookies to improve your browsing experience. You can control cookie settings via your browser.
10. Changes to This Privacy Policy
We may update this privacy policy from time to time. Any changes will be posted on this page, and we encourage you to review the policy regularly.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact me:
