Privacy Policy

Effective Date: 26/09/2024

At Hollyhock Play Therapy, we are committed to protecting your privacy and ensuring the confidentiality of any personal data that we collect. This Privacy Policy outlines how we collect, use, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:Lisa Bridger

2. Information We Collect

We may collect and process the following types of personal information from clients:

  • Personal Identifiable Information: Name, contact details (email, phone number, address).
  • Sensitive Information: Health information relevant to therapy, family background, and any special needs or issues discussed during therapy sessions.
  • Session Notes: Detailed notes taken during play therapy sessions, stored securely.

3. How We Use Your Information

We use the personal data we collect for the following purposes:

  • To provide therapeutic services to clients.
  • To communicate with clients regarding appointments and therapy progress.
  • To maintain records for professional and legal requirements.
  • For legitimate interests, such as responding to inquiries and managing ongoing services.

4. Legal Basis for Processing

We process personal information based on:

  • Consent: When you provide specific consent for us to collect and process your data.
  • Legal Obligation: Where processing is necessary to comply with our legal and regulatory obligations.
  • Legitimate Interest: Where processing is necessary for the provision of our therapeutic services and not overridden by your rights.

5. Data Sharing

We do not share your personal information with third parties except:

  • Where required by law (e.g., safeguarding concerns).
  • With your explicit consent, if necessary to coordinate with other healthcare professionals.

6. How We Protect Your Data

We take appropriate measures to ensure that your personal data is stored securely. These include:

  • Using encrypted files and secure systems for digital data.
  • Locking paper records in secure cabinets.
  • Limiting access to your information to authorized individuals only.

7. Data Retention

We will retain your personal data for as long as necessary to provide our services and comply with legal obligations. By law, we are required to retain client data for 10 years after the end of therapy, unless there are legal or safeguarding reasons to keep the data longer.

8. Your Rights

You have the following rights regarding your personal data:

  • Access: You can request access to the personal data we hold about you.
  • Correction: You can ask us to correct inaccurate or incomplete data.
  • Erasure: You have the right to request the deletion of your personal data in certain circumstances.
  • Objection: You can object to the processing of your personal data under certain conditions.
  • Data Portability: You have the right to request the transfer of your data to another service provider.

If you wish to exercise any of these rights, please contact us using the contact form.

9. Cookies and Website Data

If you use our website, we may collect non-personal information through cookies to improve your browsing experience. You can control cookie settings via your browser.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page, and we encourage you to review the policy regularly.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact me: