Privacy Policy
This privacy policy sets out how Marylebone Therapist uses and protects any information that you give Marylebone Therapist when you use this website.
Marylebone Therapist is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.
Marylebone Therapist may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 25th May 2017.
What we collect
We may collect the following information:
- name
- contact information including email address
- demographic information such as postcode, age, gender
- other information relevant to potential therapeutic work such as presenting issues
What we do with the information we gather?
The above information will be used to respond to your enquiry, to better understand your needs and provide you with a better clinical service, or for:
- Internal record keeping
- To improve our products and services
- From time to time to inform you of a workshop, or a recent blog post which we feel may be of interest
Clinical Services
When you register for our clinical service we will ask you to provide the contact details for your General Practitioner (GP). We do not make contact with the GP on a regular basis. In some circumstances it may be helpful to contact your GP to arrange better coordinated care. We would usually discuss this with you beforehand.
Due to the nature of therapy, during the consultation and ongoing sessions you will discuss with your therapist personal and sensitive information relating to your relationships and your family. Your therapist will record a brief summary of each therapy session and any key themes in the therapy. The records may also reference sensitive personal data such as information on health and sexual relationships which is relevant to the relationship therapy. Sensitive and personal information is kept under strictly confidential procedures, designed to satisfy both strict data protection and professional bodies’ regulations.
Security
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
How long do you keep my data?
The data belonging to clients in our clinical service will usually be retained for 8 years after which time it is confidentially destroyed. In exceptional circumstances, for example where clients return for further therapy, we may retain your clinical information for longer.
Who do we share your information with?
We will never sell or rent your information to third parties for marketing purposes.
In relation to your therapy, Marylebone Therapist adheres to a professional code of ethical standards which includes the principle of confidentiality. This means that we would not disclose information about you to a third party without your agreement, except in situations where there was significant concern about harm to you or someone else and this would normally be discussed with you beforehand.
Controlling your personal data
You may request details of personal information which we hold about you under the Data Protection Act 1998. If you would like a copy of the information held on you please info@marylebonetherapist.co.uk.
If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.
Online Therapy: Zoom
Marylebone Therapist offers online therapy via the ZOOM platform which is a secure, confidential and reliable video software platform. Marylebone Therapist aims to provide the highest practical levels of client confidentiality protection by using Zoom which uses end to end encryption and is GDPR and HIPAA compliant. We regret we are unable to guarantee complete confidentiality under all circumstances. Monitoring or intrusion by state agencies or by computer service providers operating under state direction may in certain jurisdictions pose a threat to client confidentiality.
When joining by computer or phone there is some device information which is collected for technical delivery purposes only and this is retained for 7 days. Information provided by the telephone service provider when participants connect via phone is retained for 24 hours only for technical delivery purposes.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
General Data Protection Regulation (GDPR)
GDPR Principles
Under GDPR, all personal data obtained and held by us must be processed according to a set of core principles. In accordance with these principles, we will ensure that:
- a) processing is fair, lawful and transparent
- b) data is collected for specific and legitimate purposes
- c) data collected is adequate, relevant and limited to what is necessary for the purposes of processing
- d) data is kept accurate and up to date. Data which is found to be inaccurate will be rectified or erased without delay
- e) data is not kept for longer than is necessary for its given purpose
- f) data is processed in a manner that ensures appropriate security of personal data including protection against unauthorised or unlawful processing, accidental loss, destruction or damage by using appropriate technical or organisation measures.
Our lawful basis for processing your general personal data
Consent of the Data Subject
We need your consent to respond to your enquiry. Consent is requested when you contact us via the contact form in our contact page.
Your rights and your personal data
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
- The right to request a copy of the personal data which we hold about you;
- The right to request that we correct any personal data if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where it is no longer necessary to retain such data;
- The right to request that we provide you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), (where applicable i.e. where the processing is based on consent or is necessary for the performance of a contract with the data subject and where the data controller processes the data by automated means);
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
- The right to object to the processing of personal data, (where applicable i.e. where processing is based on legitimate interests (or the performance of a task in the public interest/exercise of official authority); direct marketing and processing for the purposes of scientific/historical research and statistics).
How to request information or to make a complaint
Should you wish to request which information we hold on your company, to amend any data that we hold on your company or to make a complaint, please contact us and we will act upon you request immediately.
We keep this Policy under regular review. This Policy was last updated on 3rd June 2018.