Quick Navigation
Privacy Notice
Sarah Lockyer/ The Eating Recovery Therapist at Eating Recovery, will collect personal information (which may include sensitive personal data). The data I collect may include but is not limited to your name, email address, telephone number and nature of your concern. I collect this data for the use within my therapy business, mainly to contact you and to get to know you to see if I can help. This data is solely used by me and is not sold on to other third parties.
Reasons and purposes for processing information
All data obtained from you/ my website is stored securely and electronically and is protected by a minimum of a password. Stored information will be deleted one month from the last contact or seven years after the date that Eating Disorder Therapy/ Nutritional Therapy/ ends. I will dispose of your data as confidential waste once the time period is reached.
Any requests for details of data collection and storage should be sent to sarah@eatingrecovery.co.uk. I keep my Privacy Notice under regular review; the last being SEPTEMBER 2020.
If I need to keep more information than stated, it would only be with your express consent in which case the legal basis of holding this information is consent.
By continuing to enter your details you are giving your consent for me to use your data in this way. If you have any concerns about the way that I use or process your data The Information Commissioners Office (ICO) can be contacted on 03031 231113.
Therapy Services
I process personal information to enable me to provide Eating Disorder Counselling and Nutritional Therapy, to advertise my services, to maintain my accounts and records.
Type/classes of information processed
I process information relevant to the above reasons/purposes with respect to clients, enquirers, suppliers, business contacts and professional organisations in the case of complaint. This information may include: personal contact details and information about family, lifestyle and social circumstances. I also process sensitive classes of information that may include physical or mental health details. I process financial details for business reporting.
Who your information may be shared with
I may need to share the personal information I process with you, the individual themselves but not otherwise without your consent. I comply with the requirements of the General Data Protection Regulation and am committed to securing your information.
I share your data only with your consent, such as writing a confidential report to your GP. The circumstances where I may need to share some personal information I process may include: service providers, for example if there is a problem with the website booking process. Retaining your data allows me to process any complaint you may make, in which case I may share your data with my professional association NCfED/ NNA/ GNC, and my registrant body, CNHC. In this case the legal basis of me holding your personal data is for contract administration.
All mental health providers may use information where there are safeguarding issues. If I think your life is in danger I may contact an appropriate authority such as social services in the case of a child or vulnerable adult, or a GP. I may use your data if there is a legal requirement such as a formal court order. In this event I am using the legal basis of vital interests.
How I Collect and Store Your Personal Data
I may collect and process your information as follows:
- Via forms on my website when you book therapeutic services.
- Contact details you provide on the phone, or by email when making enquiries.
- Data you provide to purchase services for counselling, nutrition, testing, supplements.
- Data you provide via a confidential questionnaire which you complete when requesting an assessment with me.
- Email or other Communications regarding your ongoing care, including reports which have been prepared at your request.
Security
The information I hold is kept in secure locations with restricted access to authorised personnel only. I have suitable physical, electronic, managerial and reasonable security procedures to safeguard the information I store. I ensure that our external data processors are legally and contractually bound to ensure that security arrangements are in place where data that could identify a person is processed. Personal data held on equipment such as laptops or handheld devices is encrypted.
Security of my website and computer systems is important. My website uses software to provide high level encryption technology. Although I use advanced security measures to protect your information against loss, misuse and alteration, as is the case with all computer networks linked to the internet including for cloud data storage, I cannot make absolute guarantees over the security of these processors and as such I cannot be held responsible for it.
Your Rights
Every individual has the right to see, and have a copy of, personal data that can identify you.
You can make a subject access request in writing to sarah@eatingrecovery.co.uk. My response will include the details of the personal data I hold on you such as how I acquired the information, why I keep it and those with whom I have shared it, if this was subject to your consent.
You have the right to ask to have your information corrected or updated where it is no longer accurate. The right to ask to stop keeping your information provided that I am not required to do so by law or in accordance with Professional Regulatory Guidelines.
If you would like to invoke any of the above rights, email sarah@eatingrecovery.co.uk
How long I hold confidential information for
All records held by Sarah Lockyer, at Eating Recovery, will be kept for the duration specified by guidance from my professional associations (NCfED, NNA, GNC). In the case of counselling clients/ receipt of therapy, this is seven years.
Data Role
I act as a data controller for use of your personal data to provide the service you have requested. I also act as a controller and processor for processing your data to other healthcare providers such as a GP only where this is necessary for your care and with your consent. I act as a data controller and processor for processing online payments.
I will only keep personal data if there is a legitimate basis for doing so and any processing I do is fair and lawful. If I use your data for marketing purposes such as newsletters, this only if you give us your express consent.
I am registered with the Information Commissioner’s Office (ICO) as a data controller to collect data for the purposes already described. A copy of the registration is available through the ICO website.
Website
The technical platform of my website uses cookies to aid the functioning of the website and to analyse data about webpage traffic. This helps us to meet your personal needs. A cookie is a small file which asks permission to be placed on your computer’s hard drive. I do not make use of cookies to collect any private or personally identifiable information at all. I only use this information for statistical analysis purposes and then the data is removed from the system. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.
Analytics
Like most websites, I make use of analytics software to help us understand the trends in popularity of my website and of different sections. I make no use of personally identifiable information in any of the reports I use from this package.