​
Privacy Policy
1. Introduction
Your privacy is important to me. This Privacy Policy explains how I collect, use, store and protect your personal information when you visit my website, get in touch with me, or use my therapy services.
I am committed to handling your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who I Am
Data Controller: Nicola Gurd/ Nikki Gurd Therapy
Business Address: 59 Harold Road
Email: nikki@nikkigurdtherapy.co.uk
Website: www.nikkigurdtherapy.co.uk
For the purposes of data protection law, I am the data controller of your personal information.
3. The Information I May Collect
Depending on how you use my website or services, I may collect the following information:
Website and enquiry information
-
Your name
-
Email address
-
Phone number
-
Any information you include in a contact form or email
-
Technical website information such as IP address, browser type, and cookies
Client information
If you choose to work with me, I may also collect:
-
Your contact details
-
Date of birth
-
GP details
-
Emergency contact details
-
Relevant background or health-related information you choose to share
-
Session notes and records
-
Appointment and payment information
I will only collect information that is relevant and necessary for the safe and effective running of my practice.
4. How I Use Your Information
I may use your information to:
-
respond to your enquiry
-
arrange appointments
-
provide therapy services
-
maintain clinical records
-
send appointment confirmations or service-related information
-
manage payments and invoices
-
comply with legal, ethical, professional and insurance requirements
-
improve the functioning and security of my website
I will not use your personal data for marketing purposes without your consent.
5. Lawful Basis for Processing
Under UK GDPR, I rely on the following lawful bases for processing personal information:
For enquiries and administration
-
Legitimate interests – to respond to enquiries and manage my practice
-
Contract – where steps are taken before entering into a therapy agreement or to fulfil that agreement
For client therapy records
-
Provision of health or social care / therapy services
-
Legitimate interests
-
Compliance with legal and professional obligations
Where I process special category data (such as health-related information), I do so only where there is an appropriate lawful basis and where it is necessary for the provision of therapy and safe clinical practice.
6. Confidentiality
Anything you share with me in therapy is treated with respect and confidentiality.
However, confidentiality is not absolute. There may be rare situations where I may need to share information, for example if:
-
there is a serious risk of harm to you or someone else
-
there is a safeguarding concern involving a child or vulnerable adult
-
I am required to do so by law or court order
-
there are concerns relating to serious criminal activity or terrorism
Where possible, I would aim to discuss this with you first.
I also attend professional clinical supervision, which is standard good practice. This is done confidentially and in support of safe, ethical and effective therapy.
7. How Your Information Is Stored
I take reasonable steps to keep your information secure.
Your information may be stored using secure systems such as:
-
password-protected devices
-
encrypted email or cloud storage where appropriate
-
secure practice records
-
secure booking, contact or website systems
No online system can ever be guaranteed to be completely risk-free, but I take appropriate steps to reduce the risk of unauthorised access, loss or misuse.
8. How Long I Keep Your Information
I only keep personal information for as long as necessary.
As a general guide:
-
Enquiry emails/messages may be kept for up to 12 months
-
Client records may be kept for 7 years after the end of therapy in line with professional, legal, insurance or safeguarding requirements
-
Financial records may be kept for as long as required by HMRC or accounting regulations
Retention periods may vary depending on the nature of the work and any legal or professional obligations.
9. Sharing Your Information
I do not sell or share your personal information for advertising or marketing purposes.
I may share limited information where necessary with:
-
clinical supervisors
-
my accountant or payment provider
-
secure website, booking or IT service providers
-
legal, safeguarding or emergency services where required
-
insurers or regulatory bodies where legally or professionally necessary
Any sharing will be limited to what is necessary and appropriate.
10. Website Cookies
My website may use cookies or similar technologies to help it function properly and to understand how visitors use the site.
Cookies may be used for:
-
website performance
-
analytics
-
security
-
embedded content or booking tools
You can usually control cookies through your browser settings. For more information, please see my Cookie Policy.
11. Your Data Protection Rights
Under UK GDPR, you may have the right to:
-
request access to your personal data
-
request correction of inaccurate information
-
request deletion of your data in certain circumstances
-
request restriction of processing
-
object to processing in certain circumstances
-
request transfer of your data where applicable
Please note that some rights may be limited where records need to be retained for legal, ethical, safeguarding or insurance reasons.
If you would like to make a request, please contact me using the details above.
12. How to Complain
If you have any concerns about how your personal information is handled, I would encourage you to contact me first so I can try to resolve the issue.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Website: https://ico.org.uk
Telephone: 0303 123 1113
13. Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in legal, professional or business requirements.
The most recent version will always be available on this website.
14. Contact
If you have any questions about this Privacy Policy or how your data is handled, please contact:
Nikki @ Nikki Gurd Therapy
Email: nikki@nikkigurdtherapy.co.uk
Website: www.nikkigurdtherapy.co.uk
