Data Controller

Amy Hughes - registered with ICO as a data controller

 How I Use Your Information

I use your information to:

• Provide therapy services

• Maintain appropriate clinical records

• Respond to your inquiries

• Meet my professional and legal obligations

The legal bases I rely on for processing your data include:

• Contract (to provide therapy services)

• Legal obligation (to comply with professional requirements)

• Consent (for processing sensitive data)

• Legitimate interests (to manage my practice effectively)

Data Protection

Your information is stored securely using encrypted, GDPR-compliant systems. Clinical notes and sensitive information are kept separate from basic contact details and are protected by additional security measures.

I will only share your information in specific circumstances:

• With your explicit consent

• Where required by law

• Where there is a risk of serious harm to you or others

• With supervisors (in anonymized form) for professional development

• With my Clinical Will executor in the event of my death or serious incapacity (to ensure your care can be properly managed)

Sharing Your Information

I take the confidentiality of your information very seriously. However, there may be circumstances where I need to share your personal data with trusted third parties who assist me in delivering my services:

• Service providers who help manage my appointments and communications

• IT service providers who help maintain the security and performance of my systems

• Payment processing providers who help process your payments securely

• Professional supervisors (with anonymized information only)

• My Clinical Will executor (a designated therapist who would access your information only in the event of my death or serious incapacity, to ensure continuity of care and proper management of your records)

• Legal advisors or accountants when necessary

All third parties I work with are required to:

• Respect the security of your personal data

• Treat it lawfully and in accordance with data protection regulations

• Only use it for the specific purpose I have agreed with them

• Delete it securely when no longer needed

I will never sell your information to third parties, and I will not share your personal data for marketing purposes unless you have given explicit consent for this.

While I am UK-based and primarily work with UK-based clients, some of the third-party services I use to run my practice efficiently are based outside the UK. These include services for website hosting, video conferencing for online therapy sessions, and appointment scheduling. When these service providers process data outside the UK, they are required to protect your information according to UK privacy standards. I only work with established service providers who have committed to following UK and European data protection requirements.

If you would like more information about how your data is protected when using these services, please contact me at startblossoming@gmail.com.

Cookies and Website Data

Like most websites, my website uses cookies to improve your browsing experience. Cookies are small files containing letters and numbers that are stored on your computer if you give me permission.

The types of cookies I use are:

• Strictly necessary cookies: Required for the website to function properly. These enable basic features like secure login areas and shopping cart functionality.

• Analytical/performance cookies: Help me understand how visitors use my website, allowing me to improve the experience. These cookies collect anonymous information about how you navigate the site.

• Functionality cookies: Remember your preferences and choices to personalize your experience on my website.

Controlling Cookies

You can control cookie settings through your web browser. Here's how to manage cookies in common browsers:

• Google Chrome

• Microsoft Edge

• Firefox

• Safari

• Opera

Please note that blocking some types of cookies may impact your experience on my website. For example, some features might not function properly if you disable strictly necessary cookies.

Website Analytics

I use analytics tools to understand how visitors use my website. This helps me improve the site and provide better service. These tools collect information such as:

• Which pages you visit

• How long you spend on each page

• How you found my website

• Basic technical information about your device and browser

All analytics data is collected anonymously and cannot be used to identify you personally.

Data Retention

In line with professional guidelines, I retain therapy records for seven years after our last contact.

Your Rights

You have various rights regarding your personal data, including the right to:

• Access your personal information

• Request corrections to inaccurate information

• Request deletion of your information (where appropriate)

• Object to certain types of processing

If you have any concerns or questions about your data privacy, or if you'd like to exercise any of your data rights, please email me at startblossoming@gmail.com.

Contact Me

If you have any questions about how I handle your data, please contact me at startblossoming@gmail.com. You also have the right to contact the Information Commissioner's Office (ICO) if you have concerns about data protection.

last updated January 2025