Whenever you share information with our clinic, it is securely stored and used only for key purposes as required by GDPR.

​

Collection of Health Information
We collect personal health data to provide quality care, which forms the basis of our treatment agreement. Without this information, we may not be able to offer services.

​

Legitimate Interest in Data Collection
We have a "Legitimate Interest" in collecting your information to ensure safe and effective care.

​

Communication Needs
We may contact you to confirm and update appointments, consistent with "Legitimate Interest" for your care.

​

Storage and Data Retention
We are legally required to retain records for eight years after your last appointment or until age 25, whichever is longer. Records are kept in locked cabinets or on password-protected computers.

​

Data Access and Sharing
Your information is shared only with necessary staff, including:

• Practitioners for treatment

• Reception for scheduling

Contact information may be stored on secure third-party services for email and scheduling. Consultants with access must sign confidentiality agreements.

​

Your Rights

We want you to be confident that we are treating your personal data responsibly, and that we are doing everything we can to make sure that the only people who can access that data have a genuine need to do so.

You may view, correct, or request deletion of your records (after the minimum retention period). We take all measures to protect your information. Concerns can be directed to our Data Controller, in this case:

Georgia Caba

georgiacaba@gmail.com

​

If you are not satisfied with our response, then you have the right to raise the matter with the Information Commissioner’s Office.

​

Many thanks,

Althea Talking Therapy Team