Privacy Notice

Contact details

Name: Lisa van Hemert

Address: Room 17, Audley End Business Centre, Wendens Ambo, Saffron Walden, CB11 4JL

Phone Number: 07895 400806

Email: lisa@room-to-breathe.co.uk

ICO Registration Number: A8881395

The type of personal information we collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data which includes your first name and last name. It may also include your gender.

  • Contact Data means the data we use to contact you including your billing address, email address and mobile number.

  • Health and well-being data.

  • Transaction Data means details about transactions you have made on our website including any information or other details you have provided in respect of your request for treatment and psychiatry services.

  • Technical Data means details about the device(s) you use to access our website including your internet protocol (IP)/ MAC address, browser type and version, location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.

  • Usage Data includes information about how you use our website, products and services. This includes your browsing patterns and information such as how long you might spend on one of our webpages and what you look at and for on our website, the page that referred you to our site and the click stream during your visit to our website, page response times and page interaction information (clicks you make on a page).

  • Profile Data includes your username (email address), your login data, the psychiatry treatments you have purchased, your interests, preferences, feedback and survey responses.

We also collect, use and share aggregated and/ or anonymised data (“Aggregated Data”) such as statistical or demographic data for analytical purposes. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice. Health and well-being data is excluded from such aggregated datasets.

We only use your health and well-being data to provide you with the services you have purchased. We do not use your health and well-being data for any other purpose.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • Direct interactions: by using our website, filling in forms or by corresponding with us by post, phone, email, in person or otherwise.

  • Automated technologies or interactions: as you interact with us, we may automatically collect usage data and technical data about your equipment, browsing actions and patterns. Please see our Cookie Policy for further details.

We use the information that you have given us to:

  • Provide you with psychological therapy/ treatment.

Under the UK Data Protection Act 2018, the General Data Protection Regulation (GDPR) and applicable legislation, the lawful bases we rely on for processing this information are:

  1. We have a contractual obligation.

  2. We have a legal obligation.

  3. We have a legitimate interest.

The additional condition that we rely on for processing Special Categories of Data is:

  • the provision of health or social care or treatment or the management of health or social care systems and services.

How we store your personal information

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

In addition, we limit access to your personal data to those who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for.

International transfers

Some data processors and third parties that we use are based outside the United Kingdom, so their processing of your personal data will involve a transfer of data outside the United Kingdom.

Whenever we transfer your personal data out of the United Kingdom, we ensure a similar degree of protection is afforded to it.

Annual updates to this Privacy Notice

We keep our privacy notice under regular review to make sure it is up to date and accurate.

We will review and update this privacy notice every year.

Your data protection rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

  • Your right of access - You have the right to ask us for copies of your personal information.

  • Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

  • Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

  • Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact lisa@room-to-breathe.co.uk if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information under the UK Data Protection Act 2018 or GDPR, you can make a complaint to us at lisa@room-to-breathe.co.uk.

You can also complain to the Information Commissioner’s Office (ICO), if you are unhappy with how we have used your data. The contact details are as follows:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: www.ico.org.uk