PRIVACY POLICY
Effective Date: 1st August 2025
Candour Therapy (“we”, “our”, ”I”) is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulations (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website and use our services.
1. DATA CONTROLLER
Candour Therapy is the data controller responsible for your personal data. Our contact details are:
• Name: Candour Therapy
• Email: melanie@candourtherapy.co.uk
• Telephone: +44 7507 492970
2. PERSONAL DATA WE COLLECT
We may collect and process the following types of personal data:
• Identity Data: Name, contact details (email, phone number) provided via enquiry or booking forms.
• Health Information: Information relevant to counselling services you choose to share.
• Technical Data: IP address, browser type, and similar information collected through cookies or analytics tools.
3. LAWFUL BASIS FOR PROCESSING
We process personal data under the following lawful bases:
• Contractual necessity – to provide counselling services you request.
• Legitimate interests – to respond to enquiries and improve our website.
• Legal obligations – to comply with applicable laws and regulations.
• Consent – where required, particularly for processing sensitive health information.
4. HOW WE USE YOUR DATA
Your data is used solely for:
• Responding to enquiries and managing appointments.
• Providing counselling services in accordance with ethical and legal standards.
• Administrative purposes, including record keeping and service improvement.
• Complying with legal and professional obligations.
5. DATA SHARING AND TRANSFERS
We do not sell or share your personal data with third parties for marketing purposes. Data may be shared only:
• With trusted service providers (e.g., secure email or booking platforms) under strict confidentiality agreements.
• Where required by law, court order, or regulatory obligation.
6. DATA RETENTION
We retain personal data only as long as necessary to fulfil the purposes outlined in this policy and to comply with legal and professional record‑keeping obligations (typically 7 years after counselling services end).
7. DATA SECURITY
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse, or disclosure.
8. YOUR RIGHTS
Under the UK GDPR, you have the following rights:
• Right of access – request copies of your personal data.
• Right to rectification – request correction of inaccurate or incomplete data.
• Right to erasure – request deletion of your data, subject to legal obligations.
• Right to restrict processing – request limitation on how your data is used.
• Right to data portability – request transfer of your data to another provider.
• Right to object – object to processing based on legitimate interests.
• Right to withdraw consent – withdraw consent at any time (where consent was given).
To exercise these rights, please contact us using the details above.
9. COOKIES AND WEBSITE ANALYTICS
We may use cookies or similar technologies to enhance website functionality and analyse traffic. You can manage cookie preferences via your browser settings.
10. COMPLAINTS
If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk
ICO Reference: ZB952675
11. UPDATES TO THIS POLICY
We may update this Privacy Policy periodically. Any significant changes will be posted on this page with an updated effective date.