Privacy Policy
Last updated: 7 August 2025
1. Introduction
We respect your privacy. This notice explains how we collect, use, store and share your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This website is a simple, static site; we do not use advertising technologies or analytics cookies.
2. Data Controller
Find Balance Therapy
Email: [email protected]
Phone: 07936 315287
3. What Data We Collect
- Enquiries (contact form or email): name, email address, phone number (optional) and your message.
- Therapy clients: administrative details (e.g. contact details, appointments) and special category data in clinical records (e.g. health information) created during sessions.
- Basic technical data: our hosting provider may automatically log standard HTTP information (IP address, user-agent, date/time) to keep the site secure. We do not use this to profile you.
- Third-party content (optional): A Google Maps embed is available on the Contact page. It only loads after you choose to enable it; Google may then collect usage data according to their privacy policy.
4. Why We Use Your Data (Lawful Bases)
- Legitimate interests – to respond to your enquiry and manage routine business administration.
- Contract – to arrange and deliver counselling services you request.
- Legal obligations – to maintain records as required by professional and legal standards.
- Special category data (health): for counselling, processed under UK GDPR Art. 9(2)(h) (health/social care) and safeguarded by professional confidentiality.
- Consent – only where we ask for it (e.g., optional newsletters). You can withdraw consent at any time.
5. Cookies & Third-Party Content
We do not set analytics, advertising or tracking cookies. The site uses only essential functionality to display pages.
On the Contact page, you can choose to load an embedded Google Map. If you enable it, Google may set cookies or collect data as a separate controller under their own terms. If you prefer not to share any data with Google, you can leave the map disabled and use the written address or phone/email.
6. Sharing Your Data
We do not sell your data. We may share limited data with:
- Service providers (e.g., secure email and hosting) under data-processing agreements.
- Professional/Legal bodies where required (e.g., serious risk concerns or legal obligations), in line with professional ethics and the law.
If a service provider is located outside the UK, we implement appropriate safeguards (e.g., Standard Contractual Clauses).
7. How Long We Keep Your Data
- Enquiries (non-clients): usually up to 12 months after our last contact, then deleted.
- Clinical records (clients): typically 7 years after your last session. For children/young people, records are usually kept until at least their 25th birthday (or 26th if aged 17 at last contact). Exact retention may vary per insurer/professional guidance.
- Server logs: short-term for security and troubleshooting.
8. Security
We use appropriate technical and organizational measures to protect personal data, including secure storage for clinical records and access controls. No system can be 100% secure, but we work to minimize risk.
9. Your Rights
Under UK GDPR you can:
- Request access to your data and a copy of it.
- Ask us to correct inaccurate data.
- Ask us to erase or restrict processing, where applicable.
- Object to processing based on legitimate interests.
- Withdraw consent where processing relies on consent.
- Request data portability (for information you provided to us).
To exercise your rights, email [email protected]. You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how we use your data.
10. Changes to this Policy
We may update this notice from time to time. If changes are significant, we will highlight them on this page. Please check back periodically. The “Last updated” date shows the latest revision.
11. Contact
Questions about this policy? Email [email protected] or call 07936 315287.