Privacy Policy for Experience Connection Therapy Service
​
1. Introduction Experience Connection Therapy Service ("we," "us," or "our") is committed to protecting the privacy, confidentiality, and security of personal data. This privacy policy details how we collect, use, store, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies to all clients, employees, contractors, and third parties who engage with our therapy services, whether in person, online, or via our website (www.experienceconnection.co.uk).
​
2. What Information We Collect We collect and process personal data necessary for the provision of therapy services, operational management, and compliance with legal obligations. The types of data we collect include:
-
Personal details: Name, date of birth, address, phone number, and email address
-
Health data: Medical history, mental health information, and therapy session notes (special category data under UK GDPR)
-
Financial details: Payment information for therapy services
-
Website and communication data: IP addresses, browser type, emails, and messages sent to us
-
Professional information: Employment details (where relevant to therapy)
​
3. How We Collect Information Personal data is collected through the following means:
-
Direct interactions: When clients fill out forms, register for therapy, or communicate with us
-
Third-party referrals: From healthcare professionals or family members (with consent)
-
Website usage: Through cookies, analytics, and online forms
​
4. Lawful Basis for Processing Personal Data Under UK GDPR, we process personal data under the following lawful bases:
-
Consent: When a client voluntarily provides personal data for therapy services
-
Contractual necessity: When processing is required to deliver agreed therapy sessions
-
Legal obligations: Compliance with UK laws, safeguarding, and regulatory requirements
-
Legitimate interests: When data processing is necessary for the management and operation of our services
​
5. How We Use Personal Data Personal data is used for:
-
Delivering therapy and counselling services
-
Booking and managing appointments
-
Processing payments and issuing invoices
-
Keeping records for legal and compliance purposes
-
Responding to client inquiries
-
Conducting clinical audits and improving service delivery
​
6. Data Storage and Security We implement security measures to protect personal data, including:
-
Encrypted electronic storage
-
Secure physical record-keeping (locked cabinets for paper records)
-
Access control measures for staff
​
Personal data is retained for seven (7) years after therapy ends, unless a longer retention period is required by law.
​
7. Sharing Personal Data We do not sell personal data. However, we may share information with:
-
Healthcare professionals: For collaborative treatment (with consent)
-
Regulatory bodies: When required by UK law or professional obligations
-
IT service providers: For secure storage and system functionality
​
All third parties are required to adhere to UK GDPR and data protection regulations.
​
8. Client Rights Under UK GDPR Clients have the following rights regarding their personal data:
-
Right to access: Request a copy of personal data
-
Right to rectification: Correct inaccurate information
-
Right to erasure: Request deletion of data when no longer necessary
-
Right to restrict processing: Limit the use of personal data
-
Right to data portability: Receive data in a machine-readable format
-
Right to object: Challenge data processing based on legitimate interests
-
Right to withdraw consent: Withdraw consent at any time
​
To exercise these rights, clients may contact us at admin@experienceconnection.co.uk. Requests will be addressed within one (1) month.
​
9. Data Breach Policy In the event of a data breach:
-
We will assess the risk and take immediate action
-
If required, we will notify the UK Information Commissioner’s Office (ICO) within 72 hours
-
Affected individuals will be informed when necessary
​
10. Cookies and Website Data Our website uses cookies to enhance user experience and gather analytics. Users can manage cookie preferences through browser settings.
​
11. Complaints and Contact Information If you have concerns about how we handle personal data, you may contact:
​
Experience Connection Therapy Service
Email: admin@experienceconnection.co.uk
Website: www.experienceconnection.co.uk
​
If you are dissatisfied with our response, you may file a complaint with the ICO:
​
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113
​
12. Updates to This Policy We may update this privacy policy to reflect changes in legislation or service delivery. The latest version will always be available on our website.
​
Last Updated: 20/05/2020
​
By engaging with our therapy services, you acknowledge and accept this privacy policy.