Privacy Policy

MH Wellbeing is owned by Maria Hancock, which is a data controller of your personal data.

We have adopted this Privacy Policy, which determines how we are processing the information collected by MH Wellbeing, which also provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using MH Wellbeing website.

We take care of your personal data and undertake to guarantee its confidentiality and security.

Information We Collect

We may collect and process the following categories of personal information:

Personal Information

• Name

• Date of birth

• Address

• Telephone number

• Email address

• Emergency contact details

Health Information

As part of providing therapy services, we may collect sensitive personal information relating to:

• Physical health

• Mental health

• Medical history

• Therapy notes

• Risk assessments

• Information relevant to your treatment and wellbeing

Administrative Information

• Appointment records

• Payment information

• Correspondence by email, telephone, text message, or other communication methods

Website Information

If you visit our website, we may collect:

• IP address

• Browser type and version

• Usage data

• Cookies and similar technologies

How We Use Your Information

We use your personal information to:

• Provide therapy and wellbeing services

• Arrange and manage appointments

• Maintain therapy records

• Communicate with you regarding your care

• Process payments

• Comply with legal and professional obligations

• Protect your vital interests or the interests of others where there is a risk of harm

• Improve our services and website

Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contract - Processing necessary to provide therapy services requested by you.

• Legitimate Interests - Processing necessary for the operation and administration of our practice.

• Legal Obligation - Processing required to comply with legal, regulatory, safeguarding, and professional requirements.

• Special Category Data - Health information is special category data. We process this information for the provision of health and therapeutic services and for safeguarding purposes where applicable.

Confidentiality

Information shared during therapy sessions is treated as confidential.

However, confidentiality may be breached where:

• There is a serious risk of harm to you or another person

• There are safeguarding concerns involving a child or vulnerable adult

• Disclosure is required by law or court order

• Disclosure is necessary to prevent serious crime

Where possible, we will discuss any necessary disclosure with you beforehand.

Sharing Your Information

We do not sell your personal information.

We may share information with:

• Clinical supervisors (on an anonymised basis where possible)

• Healthcare professionals involved in your care (with your consent where appropriate)

• Professional advisers

• Regulatory, safeguarding, or law enforcement authorities where legally required

• Secure technology and service providers who support our business operations

All third parties are required to protect your information appropriately.

Data Storage and Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or disclosure.

Records may be stored:

• Securely in paper format

• Electronically using password-protected and encrypted systems

Access is restricted to authorised individuals only.

Data Retention

We retain personal information only for as long as necessary.

Client records are generally retained for [7 years after the end of therapy / your chosen retention period] unless a longer retention period is required by law, insurance requirements, or professional guidance.

At the end of the retention period, records will be securely deleted or destroyed.

Your rights:

If you are a European resident, you have the following rights related to your personal data:

• The right to be informed.

• The right of access.

• The right to rectification.

• The right to erasure.

• The right to restrict processing.

• The right to data portability.

• The right to object.

• Rights in relation to automated decision-making and profiling.

If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you (for example, if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information might be transferred outside of Europe, including Canada and the United States.

Links to other websites:

Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for such other websites or third parties' privacy practices. We encourage you to be aware when you leave our website and read the privacy statements of each website that may collect personal information.

Information security:

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, and personal data disclosure in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.

Legal disclosure:

We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Contact information:

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to maria@mhwellbeing.co.uk.