Privacy Policy

---

Bury St Edmunds Therapy collects and uses the following information to provide its services:

• Website user information (including cookie tracking)
• Name and contact details
• Date of birth
• Video/audio recordings
• Session records and notes

Bury St Edmunds Therapy's lawful bases for collecting or using personal information to provide its services are:

• Consent
• Contract

Bury St Edmunds Therapy gets its personal information directly from people visiting the Bury St Edmunds Therapy website, social media and face to face.

Bury St Edmunds Therapy keeps personal data for up to five years after the clients' last appointment, via Google Drive and an external back-up device which is permanently in secure locked storage.

Bury St Edmunds Therapy may also share personal information with:

• Health care providers
• Safeguarding organisations
• Law enforcement
• Emergency services
• Legal services

Your data protection rights under GDPR law are as follows:

• Your right to access - You have the right to ask for copies of your personal data.
• Your right to rectification - You have the right to ask to rectify personal data you think is inaccurate. You also have the right to ask to complete information you think is missing.
• Your right to erasure - You have the right to ask to erase your personal data in certain circumstances.
• Your right to restriction or objection of processing - You have the right to ask to restrict or object to the processing of your personal data in certain circumstances.
• Your right to data portability - You have the right to ask for the transfer of personal data to another organisation, or to you, in certain circumstances.

You don’t usually need to pay a fee to exercise your rights.

If you make a request, Bury St Edmunds Therapy has one calendar month to respond to you.

To make a data protection rights request, please contact us.