Your privacy is important, and I handle your data with care. This privacy notice explains how and why I collect and process your data during therapy. Under GDPR, a valid lawful basis is required to process your data. At Heart Prints Therapy, I operate under the lawful basis of “contract” as defined by GDPR when providing services.

How Your Personal Data is Used

I collect and process your data for administrative purposes, including answering questions about potential therapy, arranging consultations, and booking appointments. Minimal notes/records are kept to ensure good practice and reflection. These records are securely stored, in line with the British Association for Counselling and Psychotherapy guidelines (www.bacp.co.uk).

Types of Data Collected

I collect necessary information such as your name, email, and phone number to set up initial consultations. Further data may include personal and sensitive information essential to your therapy. This allows for a deeper understanding of your situation. I may also collect your GP’s contact information for emergencies, and you’ll be informed before any contact is made. Financial information may be collected for payment processing.

Consent to Process Your Data

By contacting me, you consent to the processing of your data for the purpose of addressing your queries and arranging an initial consultation.

Website Information

Heart Prints Therapy uses Google Analytics and cookies to monitor website performance. By using this website, you agree to use Google Analytics to track your navigation.

Data Storage

Identifiable data is kept separate from sensitive information. Data is stored securely on a password-protected personal computer, with therapy notes stored in a locked file cabinet or electronically with password protection. Data is destroyed seven years after therapy concludes, as required by my insurance.

Third-Party Data Sharing

Your data is never shared with third parties except in the following situations:

• If there is a risk of significant harm to you or another person, I will discuss this with you beforehand.
• If there are reasonable grounds to suspect involvement in terrorism or money laundering.
• If required by a Court of Law.

Your Rights Under GDPR

You have specific rights regarding your data:

• Right to be informed: This privacy notice fulfills that requirement.
• Right of access: You can request a copy of your data.
• Right of rectification: You can request corrections to any inaccurate or incomplete data.
• Right to be forgotten: Under certain circumstances, you may request the deletion of your data.
• Right to restrict processing: You can limit the processing of your data under specific conditions.
• Right of portability: You can request your data be transferred to another organization.
• Right to object: You can object to specific types of processing, like direct marketing.
• Right to object to automated processing: You have the right to avoid the legal effects of automated decision-making or profiling.

Any request regarding your rights will be considered in accordance with GDPR, BACP standards, and insurance requirements. You will receive a response within 30 days.

Data Breaches

In the event of a data breach, you and the ICO will be informed within 72 hours, as per GDPR requirements. Please contact me with any concerns.

Cookies

Heart Prints Therapy uses cookies to enhance website functionality and performance. Cookies are small files stored on your computer or mobile device when you browse websites. These cookies:

• Help the website operate as expected.
• Improve website speed and security.
• Allow you to share content on social media.
• Aid in the continuous improvement of the website.
• Optimize marketing efforts.

Cookies Do Not:

• Collect personal information without your consent.
• Gather sensitive information without explicit permission.
• Share data with advertising networks.
• Pass personal data to third parties.
• Track sales commissions.

Disabling Cookies You can adjust your browser settings to disable cookies. However, this may impact the functionality of this and other websites.