Privacy Notice

Who I am

Therese Taylor Psychotherapy Limited is the data controller responsible for personal information processed through this website and in connection with its professional services. Therese Taylor is a director of the company.

Registered office:
27 Old Gloucester Street
London
WC1N 3AX

Company registration number: 12540407

Email: therese@theresetaylorwellbeing.co.uk

ICO registration number: ZA757242

The company is not required to appoint a Data Protection Officer. If you have any questions about how your personal information is used, please contact me using the email address above.

Information collected through this website

If you contact me through this website, I may receive basic information such as your name, email address and the contents of your enquiry.

Please do not include personal, medical, psychological or other sensitive information in your initial enquiry. This instruction is provided to minimise the amount of personal information collected at the enquiry stage.

Information provided in an enquiry is used to respond to you and, where appropriate, to communicate with you about my services.

For website enquiries, my lawful basis for processing your information is legitimate interests under Article 6(1)(f) UK GDPR, namely responding to enquiries and communicating with people who are considering using my services.

Information collected when you become a client

If you become a client, I will need to collect and maintain information necessary to provide therapy and related professional services. This may include contact details and information relating to your mental or physical health, wellbeing, therapy and clinical history.

Information concerning physical or mental health is special category personal data under UK GDPR and receives additional legal protection.

I process client information only where there is an appropriate lawful basis under UK GDPR and, where special category information is involved, an applicable condition under Article 9 UK GDPR and the Data Protection Act 2018.

Confidentiality and professional supervision

Information relating to therapy is treated as confidential.

Where necessary for professional supervision and the safe and ethical provision of therapy, relevant aspects of clinical work may be discussed confidentially with Therese's clinical supervisor. Information shared will be limited to what is reasonably necessary and will be handled in accordance with professional confidentiality and data-protection requirements.

Information may also be disclosed where there is a legal requirement to do so or where disclosure is necessary to protect someone from a serious risk of harm.

Who may receive your information

I do not sell your personal information and I do not use it for advertising or profiling.

This website is hosted by Krystal Hosting Ltd, a UK-based hosting provider. Krystal operates within the UK data-protection framework and states that it is subject to the UK GDPR and applicable data-protection legislation.

Other trusted digital service providers may be used where necessary to operate the website and provide professional services.

Service providers processing personal information on my behalf are required to maintain appropriate security and to comply with applicable data-protection requirements.

Website hosting and international data transfers

The website is hosted by Krystal Hosting Ltd, a UK-based provider.

Krystal states that it operates in accordance with the UK GDPR and applicable data-protection legislation and maintains appropriate technical and organisational measures to protect personal information.

Krystal may use third-party service providers or infrastructure located outside the United Kingdom as part of providing its services. Where personal information is transferred outside the UK, Krystal states that such transfers are made in accordance with applicable data-protection law and using an appropriate legal mechanism and safeguards where required.

Therese Taylor Psychotherapy Limited does not intentionally transfer your personal information to organisations outside the United Kingdom. Where a service provider supporting this website processes information internationally, the applicable UK GDPR requirements for international transfers must be met.

How long I keep your information

I retain personal information only for as long as it is reasonably necessary for the purpose for which it was collected and for applicable professional, legal, insurance and record-keeping requirements.

Enquiry information that does not result in a client relationship will normally be deleted after three months.

Client records will normally be retained for seven years after therapy ends, after which they will be securely deleted unless there is a lawful reason to retain them for longer.

How I protect your information

I take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Access to confidential client information is restricted to those who have a legitimate professional need to access it.

Your rights

Under UK data-protection law, you may have the right to:

• request access to the personal information I hold about you;
• ask me to correct inaccurate or incomplete information;
• request deletion of your information in certain circumstances;
• request restriction of processing in certain circumstances;
• object to certain processing; and
• request transfer of your information to another organisation where the right to data portability applies.

These rights are subject to certain legal conditions and exemptions.

To exercise a right or ask a question about your personal information, contact: therese@theresetaylorwellbeing.co.uk

Complaints

If you have concerns about how your personal information has been handled, please contact me first so that I can try to resolve the matter.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data-protection regulator.

ICO website: ico.org.uk
Telephone: 0303 123 1113

Cookies and website tracking

This website does not use non-essential cookies, analytics, advertising trackers or other tracking technologies.

No personal information is collected simply because you visit or browse the website.

Information is collected when you actively provide it, such as by submitting an enquiry.

If this changes, this Privacy Notice will be updated accordingly.