Privacy Policy
1. Introduction
We are committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal data.
2. Information We Collect
We may collect and process the following data about you:
- Personal Identification Information: Name, address, phone number, email address, date of birth, gender, and emergency contact details.
- Health Information: Medical history, mental health history, treatment records, and other relevant health information.
- Financial Information: Payment details, including bank account and card details.
- Technical Data: IP address, browser type, and other technology on the devices you use to access our website.
3. How We Use Your Information
We use your personal data for the following purposes:
- To provide and manage your therapy sessions.
- To communicate with you, including sending appointment reminders and updates.
- To maintain accurate health records.
- To process payments and manage billing.
- To comply with legal obligations and regulatory requirements.
4. Legal Basis for Processing
We rely on the following legal bases to process your personal data:
- Consent: Where you have given explicit consent for us to process your health data.
- Contractual Necessity: To fulfill our contract with you and provide the requested services.
- Legal Obligation: To comply with applicable laws and regulations.
- Legitimate Interests: For the purposes of managing our business and improving our services, where such interests are not overridden by your data protection rights.
5. Data Retention
We will retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, we retain therapy records for seven years after the end of treatment.
6. Sharing Your Information
We do not sell or rent your personal data to third parties. We may share your data with:
- Healthcare Providers: With your consent, we may share information with other healthcare professionals involved in your care.
- Service Providers: Third-party service providers who perform functions on our behalf (e.g., IT support, payment processing).
- Legal Authorities: Where required by law or to protect our legal rights.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
8. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right to Access: Request access to your personal data and information about how we process it.
- Right to Rectification: Request correction of any inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data where there is no lawful basis for continued processing.
- Right to Restrict Processing: Request restriction of processing under certain circumstances.
- Right to Data Portability: Request transfer of your personal data to you or a third party.
- Right to Object: Object to processing of your personal data based on legitimate interests.
9. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on our website, and where appropriate, notified to you by email.
10. Contact Us
If you have any questions about this privacy policy or our data practices, please contact us at: info@gtcounselling.com or 07825381190
11. Complaints
If you are not satisfied with our response to any privacy-related concern, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.