GDPR Policy

Effective Date: 31/01/25

Last updated: 31/01/25

‍

1. Introduction

MelaniePlant Psychotherapy is committed to protecting and respecting your privacy.This GDPR policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679(GDPR).

2. Data Controller

Melanie Plant Psychotherapy is the data controller responsible for your personal data.If you have any questions about this policy or how your data is handled, you can contact us at:

Email: admin@melanieplantpsychotherapy.co.uk
Address: Turnend, Daleford Mannor, Dalefords Lane, Sandiway, Cheshire, CW8 2BT
Phone: 07905524973

3. What Data We Collect

We may collect and process the following personal data:

• Name and contact details (email address, phone number, postal address)
• Date of birth
• Information provided during therapy sessions
• Payment details (if applicable)
• Website usage data (via     cookies and analytics tools)

4. How We Collect Your Data

‍We collect data through the following means:

• Direct interactions (e.g. filling out contact forms, booking appointments, or sending emails)
• Website analytics tools (Google Analytics, cookies, etc.)
• Third-party referral services (if applicable, with consent)

5. Purpose of Data Processing

‍We process your personal data for the following purposes:

• Providing psychotherapy services
• Managing appointments and communication
• Processing payments
• Complying with legal and ethical obligations
• Enhancing website user experience

6. Lawful Basis for Processing

‍We process personal data under the following legal bases:

• Consent: When you provide explicit consent (e.g., signing consent forms for therapy sessions)
• Contractual Necessity: To provide the agreed-upon therapy services
• Legal Obligations: To comply with applicable legal and professional regulations
• Legitimate Interests: To improve our services and communication

7. Data Sharing andThird Parties

‍We do not sell or rent your personal data. However, we may share data with:

• Professional regulatory bodies (if legally required)
• Payment processing services (for billing purposes)
• IT service providers (to maintain secure website and email communications)

All third-party service providers are required to comply with GDPR regulations to ensure your data is protected.

‍8. Data Retention

‍We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, including legal and ethical requirements.

• Client records: Retained for [Insert Retention Period] years after the last session (in accordance with professional guidelines)
• Website inquiries: Retained for 12 months
• Financial records: Retained for tax and accounting compliance

9. Data Security

‍We implement appropriate technical and organisational measures to safeguard your personal data, including:

• Secure storage systems
• Encrypted email communication
• Limited access to personal data

10. Your Data ProtectionRights

‍UnderGDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request data deletion (where applicable)
• Restrict processing of your data
• Object to data processing
• Request data portability
• Withdraw consent at any time (if applicable)

To exercise these rights, please contact us at [Insert Email]. We will respondwithin one month of receiving your request

‍11. Cookies and Tracking Technologies Our website may use cookies to enhance user experience. You can manage your cookie preferences through your browser settings. For more details, refer to our CookiePolicy

‍12. Changes to ThisPolicy We may update this GDPR policy from time to time. Any changes will be posted on this page with the updated date.

‍13. Contact Information If you have any concerns about how we handle your data, you can contact us at:

‍Email: admin@melanieplantpsychotherapy.co.uk
Address: Turnend, Daleford Mannor, Dalefords Lane, Sandiway, Cheshire, CW8 2BT
Phone: 07905524973

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant Data Protection Authority in your country.

‍

‍