I am committed to protecting your privacy and handling your personal information fairly, lawfully and transparently in accordance with UK data protection legislation.
This Privacy Notice explains how I collect, use, store and protect your personal information.
Who I am
Dramatherapy with Sarah is an independent private dramatherapy practice.
For the purposes of UK data protection law, I am the Data Controller for the personal information I collect and process.
If you have any questions about this Privacy Notice or how I use your information, please contact me using the details on my Contact page.
What information I collect
Depending on your relationship with my practice, I may collect:
- Your name, address, telephone number and email address.
- Date of birth.
- Emergency contact details.
- Information you provide when making an enquiry.
- Information relevant to your therapy, including health and wellbeing information.
- Session notes and clinical records.
- Appointment and payment information.
- Correspondence between us.
Some of this information is classed as special category data because it relates to your health.
How I collect your information
I may collect information when you:
- Contact me via my website, email or telephone.
- Complete forms.
- Attend assessment or therapy sessions.
- Correspond with me during the course of therapy.
Why I use your information
I process your information to:
- Respond to enquiries.
- Assess whether my service is appropriate.
- Provide dramatherapy.
- Maintain accurate clinical records.
- Arrange and manage appointments.
- Communicate with you about your therapy.
- Meet my professional, ethical and legal obligations.
- Manage my practice.
My lawful basis for processing
Under UK GDPR, I rely on:
- Article 6(1)(b) — processing necessary for providing services to you.
- Article 6(1)(c) — compliance with legal obligations where applicable.
- Article 6(1)(f) — my legitimate interests in safely managing my practice.
Where I process health information, I also rely on:
- Article 9(2)(h) — provision of health or social care.
- Where relevant, other lawful conditions permitted under UK data protection law.
Who I share your information with
Your information is treated confidentially.
I will only share information where:
- you have given your consent;
- there is a legal or safeguarding obligation to do so;
- disclosure is necessary to protect you or another person from serious harm; or
- I am required to do so by law or a court.
Where appropriate, I may discuss aspects of my work in professional supervision. Information is anonymised wherever possible.
How long I keep your information
Records are retained in accordance with professional guidance, legal requirements and my Records Retention Policy.
When information is no longer required, it is securely destroyed.
How I keep your information secure
I take appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse or disclosure.
Your rights
Under UK GDPR, you have rights including:
- to be informed about how your information is used;
- to request access to your personal information;
- to request correction of inaccurate information;
- to request erasure where applicable;
- to request restriction of processing in certain circumstances;
- to object to certain types of processing; and
- to lodge a complaint.
These rights are not absolute and may be limited where professional or legal obligations apply.
Data Protection Complaints
If you have any concerns about how I have collected, used, stored or shared your personal information, please contact me in the first instance using my contact details. I take data protection concerns seriously and will investigate your complaint fairly and promptly.
I will acknowledge receipt of your complaint within 30 days and keep you informed of the progress of my investigation where appropriate. Once my investigation is complete, I will explain the outcome and any action I have taken.
If you remain dissatisfied with my response, you have the right to complain to the Information Commissioner’s Office (ICO). Further information is available at www.ico.org.uk.
Website cookies
My website may use essential cookies to ensure it functions correctly. If analytics or other non-essential cookies are used, you will be asked for your consent where required.
Changes to this Privacy Notice
I may update this Privacy Notice from time to time. The most recent version will always be available on my website.