Sarah Tinsley Counselling and Supervision Privacy Policy

Our contact details 

Name: Sarah Tinsley 

Address: Reception Building, East Terrance, Off Euxton Lane, Chorley, PR7 6TE 

Phone Number: 07305 621 885

E-mail: hello@sarahtinsleycounselling.co.uk 

 

Introduction

Our organisation, Sarah Tinsley, (“we” or “us”) is registered with the Information Commissioner’s Office (“ICO”) under registration number  ZA528855

Privacy and confidentiality are at the heart of everything that we do. We value the trust that you place in us by sharing your personal data with us.  This policy sets out how we collect, use, look after and disclose personal data which may be obtained via our website or other means including online forms, email or phone.  

This notice applies to personal data provided by our clients, potential clients and any third party suppliers whose data we process. In this policy “you” refers to any individual whose personal data we hold or process.

We provide counselling,  psychotherapy, training and supervisory services and if we do provide such services to you, please note a separate privacy notice will apply and will be provided to you. We do not process personal data on a large scale, but we will hold and process personal data in order to supply our services. 

This notice is governed by the EU General Data Protection Regulation (the “GDPR”), UK GDPR, Data Protection Act 2018 and any other applicable data or privacy legislation

 

The type of personal information we collect 

We currently collect and process the following information:

  • Personal identifiers, for example, name, address, phone number and email address which we will use to provide services to you. 
  • Professional identifiers, for example job title / role, country of residence which we will use to provide services to you.
  • Financial information, for example credit or debit card details which we will use in order to receive payment for services provided to you. 
  • Supplier information, for example contact information which we will use to procure goods and services.  
  • Contact information for example, name, email address, phone number which we will use to market and promote our services 

 

We process all this information on the basis of our legitimate interests in communicating with interested individuals about our services, providing services and improving those services on the basis that you have consented to receive the information (as applicable).

 

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • Subscribing to our mailing list 
  • Becoming a client of Sarah Tinsley Counselling and Supervision 
  • Attending an event (online or in person) run by Sarah Tinsley Counselling and Supervision
  • Making an enquiry via our website, by email, by phone or via a Directory Listing eg. via the BACP Therapist Directory or Counselling Directory. 

 

We use the information that you have given us in order to: 

  • Send you communications from our mailing list 
  • Respond to enquiries or requests for information
  • Provide you with counselling and therapy or supervision services 
  • Make referrals to other healthcare providers if required 
  • Provide you with training or event information 
  • Procure services or supplies from you

 

Data retention

Our current policy is that we delete or destroy (to the extent we are able to) personal data in accordance with the following retention periods:

Information relating to our users

We will hold information for registered and non-registered users for 7 years from the date on which we collect the data, or from the date on which you cease to be a registered user, whichever is later. 

Information relating to our suppliers

We will hold information for suppliers for 7 years from the date on which our agreement with that supplier has been terminated.

Marketing and subscription records (where we have not provided services to you and you have not provided information to us)

Up to 3 years from the date on which you last interacted with us.

We regularly review the data that we hold to check that it is relevant and up to date.  If we find that it is not, we will take every step to correct or safely delete this data as may be required.    

 

How we store your personal information 

We will take all reasonable steps to ensure that appropriate technical and organisational measures are carried out in order to safeguard the information we collect from you and protect against unlawful access and accidental loss or damage. These measures may include (as necessary):

  • protecting our servers with software firewalls
  • locating our data processing storage facilities in secure locations
  • encrypting all data stored on our server with an industry standard encryption method
  • securely disposing of or deleting your data
  • regularly backing up and encrypting all data we hold.

Sharing your data

We do not disclose any information you provide to any third parties other than as follows:

  • From time to time we will transfer personal data to our processors or sub-processors, other service and technology providers for example, Mailerlite, 
  • we may be required to disclose certain data to regulators or other lawful authorities
  • We may disclose information to our group companies
  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation (for example, if required to do so by a court order or for the purposes of prevention of fraud or other crime)
  • In order to enforce any terms and conditions or agreements for our services that may apply
  • If we are sub-contracting services to a third party we may provide information to that third party in order to provide the relevant services;

If we do supply your personal data to a third party we will take reasonable steps to ensure that your privacy rights are protected and that third party complies with the terms of this notice.

Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information. 

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances. 

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at admin@sarahtinsleycounselling.co.uk if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at admin@sarahtinsleycounselling.co.uk

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:            

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

 

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk