General Data Protection Regulation (GDPR) Statement for The Holistic Foundation

What data do we collect?

The data we collect may include:

• Personal details: Name, contact information (email address, phone number), school/workplace affiliation (if applicable).
• Demographic information: Age, gender (optional).
• Therapeutic information: Information relevant to your therapy sessions, such as presenting concerns, progress notes, session notes (anonymised where possible).
• Non-identifiable information: We may collect anonymous data about your use of our services, such as appointment times and types of services utilised.

How do we use your data?

We use your data for the following purposes:

• To provide you with the holistic therapeutic services you request.
• To communicate with you about your appointments and other relevant information.
• To maintain accurate records of your therapy sessions.
• To improve our services and develop new services that meet your needs.
• To comply with legal and regulatory requirements.

The legal basis for processing your data

We process your data on the following legal bases:

• Consent: You will be asked to provide your explicit consent for the collection and use of your personal data for therapeutic purposes.
• Contract: Your data is necessary to fulfil our contractual obligation to provide you with the services you have requested.
• Legal obligation: We may be required to process your data to comply with legal or regulatory requirements.

How do we store your data?

Your data is stored securely on our servers and with trusted third-party providers. We take appropriate technical and organisational measures to protect your data from unauthorised access, loss, alteration, and destruction.

How long do we keep your data?

We will retain your data for as long as it is necessary to provide you with the services you have requested and to comply with legal and regulatory requirements. Therapy records are typically kept for a minimum of seven years, after which they will be securely destroyed in accordance with data protection best practices.

Your Data Rights

Under the GDPR, you have a number of rights in relation to your personal data. These include:

• The right to access your data
• The right to rectification of inaccurate data
• The right to erasure of your data (in certain circumstances)
• The right to restrict the processing of your data
• The right to data portability
• The right to object to the processing of your data

Children's Data

We take particular care to protect the privacy of children. We will only collect and process the data of children with the explicit consent of a parent or guardian.

Contact Us

If you have any questions about this GDPR statement or your data privacy rights, please contact us at The Holistic Foundation.. www.theholisticfoundation.co.uk

Changes to this Statement

We may update this statement from time to time. We will notify you of any changes by posting the revised statement on our website.

This statement is intended to be a clear and concise explanation of how The Holistic Foundation handles your personal data. It is important to note that this is a sample statement, and you may need to adjust it based on your specific circumstances. We recommend consulting with a data protection specialist to ensure your statement is compliant with GDPR regulations.