Privacy Policy
Legal Information
1. Who We Are and Contact Details
This privacy policy explains how the South West OCD clinic collects and uses personal data. We are the data controller for the information we process. If you have any questions about this policy or our data protection practices, please contact us at info@southwestocdclinic.co.uk
2. What Personal Data We Collect
In accordance with UK GDPR, we may process and collect the following data about you:
- Contact Form and Enquiries: Name, email address, phone number, and the nature of your enquiry.
- Therapy Records: Notes from sessions, assessments, clinical history, and treatment plans
- Website Usage: Technical data including IP address, browser type, and how you interact with our website via cookies.
3. How We Use Your Data
We use your information to manage your clinical care, respond to your enquiries, schedule appointments, process payments, and improve our website experience through analytics.
4. Sharing with Third Parties
We do not sell your data. We only share information when strictly necessary with:
- Emergency Services: If we believe there is a serious risk of harm to yourself or others.
- Professional Referrers and Insurers: Where relevant to your care or payment.
- Service Providers: IT and website hosting providers who support our operations under strict confidentiality agreements.
5. Data Storage and Security
We take the security of your data seriously and implement appropriate technical and organisational measures to protect it. Clinical records are stored in encrypted, secure systems with restricted access.
6. How Long We Keep Your Data
We retain clinical data in line with professional guidelines and legal requirements, typically for a period of 7 years following the end of treatment, after which it is securely destroyed.
7. Your Rights
Under UK GDPR, you have the right to request access to your data, rectification of errors, erasure of data, restriction of processing, and the right to data portability. You also have the right to object to processing based on legitimate interests. If you have any concerns about our use of your personal information, you can make a complaint to us directly. You also have the right to complain to the Information Commissioner’s Office (ICO). The ICO’s address is: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.