Nicola Marshall

Introduction

 

Protecting the privacy and security of your personal data is a high priority. This privacy policy explains how I handle your personal information in compliance with the General Data Protection Regulation (GDPR), my professional insurance requirements, and industry code of ethics.

 

Collection of Information

 

I collect personal information you provide during in-person, phone, email, or website communication. This data enables me to determine if I can offer services, provide treatment, contact you regarding sessions, and issue invoices. 

 

The types of data collected may include: name, contact details, symptoms, relationships/experiences, family background, and medical history. By contacting me or sharing information, you consent to me retaining and using it in alignment with this policy.

 

I retain adult client information for 7 years after last treatment, as advised by my professional body and required by my insurance. For minors, records are kept 7 years after they reach age 18.

 

Children under 16 require a parent/guardian's consent to process their data lawfully.

 

Use of Cookies

 

This website uses cookies to improve user experience and collect analytics on visitor traffic. Cookies may also be set on behalf of third party social media platforms if you use their sharing buttons. You can accept or deny cookie use as required under GDPR.

 

Cookies are text files saved on your device via your browser containing usage information that enables a customized experience. You can block cookie saving in your browser settings, but it may impact site functionality.

 

Analytics Tracking 

 

Third party services collect standard website traffic data to analyze visitor patterns. This does not process information that identifies you personally, and your anonymity is maintained.

 

Confidentiality 

 

I maintain client confidentiality and do not share your information without consent. This means I will not acknowledge knowing you outside of sessions, disclose you are a client, or leave messages with unapproved parties. Session notes are securely stored. By providing a phone number, you consent to me leaving voicemails unless otherwise stated.

 

I may anonymously share case studies with all personal details removed for continued professional development as permitted by my code of ethics.

 

I would only breach confidentiality if legally required or where there is significant potential harm to you or others.

 

Your Rights

 

You have the following rights regarding your personal data:

 

- Request your information be shared with a third party (data portability)

 

- Request correction of inaccurate records

 

- Request erasure of records in certain circumstances (right to be forgotten) 

 

- Request human review of any automated processing, if applicable

 

- Obtain a copy of your information free of charge within 30 days by written request (right of access)

 

- Request restricting or objecting to certain data processing

 

- Understand how your data is collected and processed (via this policy)

 

You can withdraw consent for me to use your information at any time, which may require ceasing treatment. You can learn more about your rights on the ICO website.

 

You have the right to lodge a complaint with the ICO if you believe your data rights are not being upheld.