Privacy Policy for Dovetail Therapy

 At Dovetail Therapy, I am committed to protecting and respecting your privacy. This policy explains when, why, and how I collect personal information about people who use my services, how I keep it secure, and the conditions under which I may disclose it to others.

1. Who I Am 

I am Alison Tyrrell-Scott, an Advanced Drawing and Talking and Sand Play Practitioner operating Dovetail Therapy. For the purposes of UK Data Protection law, I am the "Data Controller" of your personal data.

2. The Type of Personal Information I Collect

I currently collect and process the following information:

• Contact details: Names, phone numbers, email addresses, and home addresses of clients and/or parents/guardians.

• Financial information: Details of payments made via Bank Transfer or PayPal (I do not store your card or bank account details directly).

• Sensitive therapeutic information: Session notes, signed contracts, client ages, and photographs of completed sand trays or drawings.

3. How I Get the Personal Information and Why I Have It

Most of the personal information I process is provided to me directly by you for one of the following reasons:

• To book and arrange your 12-week therapeutic block.

• To communicate with you regarding appointments.

• To deliver safe and effective therapeutic interventions.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases I rely on for processing this information are:

• Contractual Obligation: We need this data to fulfil the terms of our signed therapy agreement.

• Legitimate Interests: To maintain professional and clinically accurate records of my practice.

• Special Category Data (Health/Therapy Notes): Processed under the basis of providing health or social care support.

4. How I Store Your Personal Information

Your information is securely stored to protect your privacy:

• Physical Records: Any paper documents, signed contracts, or handwritten session notes are kept in a securely locked filing cabinet.

• Digital Records: Electronic data, email communications, and digital session records are stored on a password-protected computer and backed up onto an encrypted USB storage drive.

Data Retention: I keep your personal information and session records for 5 years after the completion of your final therapy block, as required by my professional practice standards and insurance protocols. Once this 5-year period has expired, I will securely destroy all paper records by shredding them and permanently delete all digital files from my computer and encrypted drives.

5. Who I Share Your Information With

Your data is kept strictly confidential. It is never sold or shared with third parties for marketing purposes. It will only be shared under the following exceptional circumstances:

• With my clinical supervisor (to ensure good practice, where the client remains anonymous).

• With my named professional executors in the event of an emergency where I am unable to contact you myself.

• If a legal requirement arises (such as a court of law) or if a safeguarding disclosure indicates a serious risk of harm to yourself, your child, or anyone else.

6. Your Data Protection Rights

Under UK data protection law, you have rights including:

• Your right of access: You have the right to ask me for copies of your personal information.

• Your right to rectification: You have the right to ask me to rectify personal information you think is inaccurate.

• Your right to erasure: You have the right to ask me to erase your personal information in certain circumstances.

7. How to Complain

If you have any concerns about my use of your personal information, you can raise them directly with me at Dovetail Therapy.

You can also complain to the ICO if you are unhappy with how I have used your data.

• Website: ico.org.uk

• Helpline: 0303 123 1113