1. Data Controller

Sara Whittaker Email: sara@wildreedtherapy.co.uk

ICO Registration Number: ZB918561

2. Information I Collect

2.1 Contact Information

• Name, Physical and Email address, Phone number

• Any information you choose to share when making an enquiry

Lawful basis: Contract and Legitimate Interest.

2.2 Therapy‑Related Information

• Session notes, Background information you choose to share, Communications between us

• Safeguarding‑relevant information (including GP and emergency contact details)

Lawful basis:

• Article 9(2)(h) — provision of health services

• Article 6(1)(d) — vital interests (for safeguarding)

2.3 Website & Technical Data

• IP address, Browser type, Pages visited, Cookies and analytics data

Lawful basis: Legitimate Interest and Consent (for non‑essential cookies).

3. How Your Information Is Used

I use your information to:

• Provide therapy sessions, Communicate about appointments, Maintain accurate clinical records, Respond to enquiries, Ensure safety and fulfil legal obligations, Improve the website

4. Sharing Your Information

Your information is kept confidential. I only share data when:

• Required by law, There is a serious risk of harm, You request it

5. Data Storage & Security

I take the security of your information seriously. Measures include:

• Encrypted digital storage, Password‑protected devices, Secure cloud services, Restricted access to clinical notes

Paper Clinical Notes

I keep brief handwritten therapy notes. I keep brief paper clinical notes, which are stored securely and accessible only to me.  They are retained for 7 years in line with professional guidance.

6. Cookies & Analytics

• Essential cookies for functionality, Optional analytics cookies, IP anonymisation enabled, Consent required for non‑essential cookies

7. Your Rights Under UK GDPR

You can:

• Access your data, Request corrections, Request deletion (where possible), Restrict or object to processing, Request data portability, Withdraw cookie consent

8. Data protection complaints

If you have any concerns about my use of your personal information, you can make a data protection complaint to directly to me: Email: sara@wildreetherapy.co.uk

I will respond within 30 days.

If you remain unhappy with how I’ve used your data after raising a complaint with me, you can also complain to the ICO. 

9. Data Breaches

If a breach poses a risk to you, I will:

• Notify you promptly, Inform the ICO where required, Take immediate steps to secure your data

10. Communication Methods

Email is my primary communication method. If you choose SMS or WhatsApp, please note these may not offer the same level of security.

11. Updates to This Policy

This policy may be updated occasionally. The latest version will always be available on this website.