1. Introduction

Your privacy is very important to Bournemouth Therapy. This privacy policy provides information about the personal information that Bournemouth Therapy collects, and the ways in which Bournemouth Therapy uses that personal information. This policy is compliant with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

2. About this Privacy Policy

This privacy policy explains how I, Carly, of Bournemouth Therapy, collect, use, and protect your personal information. It also outlines your rights in relation to your personal data. By using my services, you agree to the collection and use of information in accordance with this policy.

3. Data Controller

For the purpose of the GDPR, the data controller is:
•Name: Carly, Bournemouth Therapy
•Address: Bournemouth, UK (full address available on request)
•Phone: 07766 609824
•Email:
•ICO Registration Number: [Insert ICO Registration Number Here]

4. What Information I Collect

I may collect and process the following information about you:
•Personal Data: This includes your name, address, email address, phone number, date of birth, and GP details.
•Sensitive Data (Special Category Data): This includes information about your mental and physical health, personal history, relationships, and any other information you choose to share during our sessions. I also keep brief, anonymised notes of our sessions.

5. Lawful Basis for Processing Your Data

My lawful basis for processing your personal data is as follows:
•Contract: The processing of your personal data is necessary for the performance of our therapy contract.
•Legitimate Interests: I may also process your data for my legitimate interests, such as for my own supervision or for accounting purposes.
•Legal Obligation: I may be required to process your data to comply with a legal obligation, such as a court order.
•Consent: Where I rely on your consent to process your data, I will make this clear to you at the time. You have the right to withdraw your consent at any time.
For the processing of sensitive data, my lawful basis is that it is necessary for the provision of health or social care, and for the management of health or social care systems and services.

6. How I Use Your Information

I use the information I collect for the following purposes:
•To provide you with therapy services.
•To communicate with you about your appointments and other administrative matters.
•To comply with my legal and professional obligations.
•For my own supervision, in which case your identity will be kept anonymous.
•For accounting and tax purposes.

7. Data Storage and Retention

I take the security of your data very seriously. Your personal information is stored securely and confidentially. Paper records are kept in a locked filing cabinet, and electronic records are encrypted and password-protected.
In line with guidance from my professional body (BACP) and my insurers, I will retain your personal information for a period of 7 years after our work together has ended. After this time, your records will be securely destroyed.

8. Your Rights

Under the GDPR, you have the following rights:
•The right to be informed: You have the right to be informed about the collection and use of your personal data.
•The right of access: You have the right to access your personal data and supplementary information.
•The right to rectification: You have the right to have inaccurate personal data rectified, or completed if it is incomplete.
•The right to erasure: You have the right to have your personal data erased. This is also known as ‘the right to be forgotten’.
•The right to restrict processing: You have the right to request the restriction or suppression of your personal data.
•The right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
•The right to object: You have the right to object to the processing of your personal data in certain circumstances.
If you wish to exercise any of these rights, please contact me at .

9. Sharing Your Information

I will not share your personal information with any third parties without your consent, except in the following circumstances:
•If I am required to do so by law, such as by a court order.
•If I believe that you or someone else is at risk of serious harm.
•For the purposes of my own supervision, in which case your identity will be kept anonymous.

10. Confidentiality

Confidentiality is a fundamental aspect of therapy. Everything you discuss with me is confidential, subject to the exceptions outlined in the ‘Sharing Your Information’ section above.

11. Data Breaches

In the unlikely event of a data breach, I will notify the Information Commissioner’s Office (ICO) and you, in accordance with my legal obligations.

12. Complaints

If you have any concerns about how I have handled your personal data, please contact me in the first instance. If you are not satisfied with my response, you have the right to complain to the Information Commissioner’s Office (ICO). You can contact the ICO at or by calling their helpline on 0303 123 1113.

13. Changes to this Policy

I may update this privacy policy from time to time. The latest version will always be available on my website. I encourage you to review this policy periodically to stay informed about how I am protecting your information.

14. Contact

If you have any questions about this privacy policy or my treatment of your personal information, please contact me:
•By email:
•By phone: 07766 609824