Privacy Policy

Effective Date: 26/01/2025

1. Introduction Rise and Grow Therapy ("we," "our," or "us") is committed to protecting the privacy and confidentiality of our clients. This Privacy Policy outlines how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Collection We collect and process personal data necessary for the provision of psychotherapy services. This may include:

  • Name, address, and contact details

  • Date of birth

  • Emergency contact information

  • Limited Medical and mental health history

  • Session notes and records

  • Payment details (where applicable)

All data is collected directly from you unless otherwise agreed upon.

3. Purpose of Data Processing Your personal data is used for the following purposes:

  • Providing psychotherapy services

  • Keeping accurate client records

  • Communicating with you regarding appointments and relevant services

  • Ensuring compliance with legal and ethical obligations

Your data will not be used for marketing purposes or shared with third parties for commercial use.

4. Data Retention We retain client records for a period of six (6) years following the conclusion of therapy, in accordance with professional and legal guidelines. For children and young people, records will be kept until they reach the age of 25 (or 26 if they were 17 at the time of their last therapy session). After this period, all records will be securely destroyed.

5. Data Sharing and Confidentiality All information shared in therapy is kept confidential except in the following circumstances:

  • Where there is a risk of serious harm to you or others

  • When required by law (e.g., court orders, safeguarding concerns)

  • If you provide written consent for information to be shared

We may discuss anonymised case details in professional supervision to ensure quality of service, in accordance with ethical standards.

6. Data Security We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or misuse. These measures include:

  • Secure storage of physical records

  • Encrypted electronic storage

  • Restricted access to client data

7. Your Rights Under the UK GDPR, you have the following rights regarding your personal data:

  • The right to access and request copies of your data

  • The right to request corrections to inaccurate or incomplete data

  • The right to request deletion of your data (subject to legal retention obligations)

  • The right to restrict or object to processing

  • The right to data portability (where applicable)

If you wish to exercise any of these rights, please contact us at [Your Contact Information].

8. Complaints If you have concerns about how your data is handled, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

9. Changes to This Policy We may update this Privacy Policy from time to time. Any changes will be posted on our website and, where appropriate, notified to you.

10. Contact Information If you have any questions about this Privacy Policy or how we handle your data, please contact us via email at riseandgrowtherapy@outlook.com.