INTRODUCTION

This ‘General Privacy Statement’ outlines how your personal data is processed through use of this website, our social media pages, our profiles/pages on third-party platforms, our events/workshops and our digital products.

You can also view other relevant policies like our ‘Terms of Use’ and ‘Cookie Policy’ on the footer of this website. By using any of these forms of communication, you agree to the collection and use of your personal information in accordance with this statement.

This website, our social media pages, our profiles/pages on third-party platforms, our events/workshops and our digital product(s) do not address anyone under the age of 18 (“Children”) directly. If we discover that a child under 18 has provided us with personal information, we will securely destroy this information immediately.

All your personal data will be kept in accordance with the Data Protection Act (1998), General Data Protection Regulation (2018) and in line with Information Commissioners Office (ICO) guidance.

The type of personal information we collect

·           If you send a query through to us via our contact page on this website, we collect your name, email address, your query and how you heard about us. For these queries we discourage sharing sensitive information or personal data other than the details that are necessary for us to respond to your query. We are not responsible for any personal data you share outside of those requested from you to respond to your query.

·           If you make a booking via our Calendly page, we collect your name, email address, phone number, and your responses to questions on your availability, the type of service you are looking for e.g. therapy or coaching, your preferred method of payment, information on the problem you are struggling with, your preference for the discovery call format and how you hear about us.

·           If you make a request for a free digital product, we collect your name and email address.

·           If you book one of our workshops or purchase a ticket to one of our events then we may collect your name and email address.

·        We may from time to time submit surveys or polls via our social media profiles and your participation in these means we will process your personal data. Please note that for any direct messages or comments received via our social media profiles (Instagram, LinkedIn) means we may process your personal data e.g. your social media handle.

This website is hosted by Squarespace which collects your personal data to power our site analytics. This includes the collection of the following:

·      Information about your browser, network, and device

·      Web pages you visited prior to coming to this website

·      Your IP address

This information may also include details about your use of this website, including:

·      Clicks

·      Internal links

·      Pages visited

·      Scrolling

·      Searches

·      Timestamps

Please see the ‘Client Privacy Statement’ under ‘Work With Me’ section of this website, for full details on how your personal data is processed if you disclose information that would be categorised as special category data e.g. health data.

Why we collect personal data

·        To answer queries

·        To facilitate discovery calls

·        To provide access to our digital product(s)

·        To deliver a workshop or event

·        To ensure that any safeguarding risks are managed safely

·        To respond to any complaints and investigations

·        For auditing purposes

·        To design relevant psychoeducational content

·        To maintain this website and power our site analytics

Who we share your personal information with

·        If we become aware of a safeguarding risk issue through your communication with us via this website, by email, via our Calendly booking page or via our social media profiles (Instagram, LinkedIn) or any other third-party platform we use. The risks will be discussed with a clinical supervisor with minimal personal data shared and we will share your personal information with relevant healthcare providers, safeguarding teams support services and medical professionals and GP’s where appropriate. In such cases you would normally be consulted. Please see the ‘Client Privacy Statement’ under ‘Work With Me’ section of this website, for full details on how your personal data relating to risk is processed.

·       We share your personal data with Squarespace, our website analytics provider, to learn about site traffic and activity. Please see our ‘Cookie Policy’ in the footer of this website.

Third-party platforms

·        We use the following third party platforms; Squarespace, Calendly, Zoom, Eventbrite, Psychology Today, BARK, BUPA finder, Practice Rooms and a secure email account using Protonmail, to collect your personal data. Google Business also collects your data when you visit our Google Business page.

·        We are not responsible for the use of your personal data by any of the third-party platforms we use. We have no control over, and assume no responsibility for the content, privacy policies or practices of any of third-party sites or services we use. Please review the specific Terms and Conditions and Privacy Policies for the respective third-party platforms stated above as these will apply to any of the personal data you choose to share with us.

·       Use of the above third-party platforms may include the transfer of your personal information outside the European Economic Area (EEA), when they are based outside of the EEA.

Lawful base:

·        Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing your personal data are:

• Legal obligations

• Legitimate Interests

·        You are able to remove your consent at any time. You can do this by emailing us at [info.coopoosamypsychology@protonmail.com]. The withdrawal of consent to process your personal data will be noted, along with the category of data relevant and no further personal data will be collected or recorded.

How we store your personal data

·      Your personal data that we gather from emails and our contact page in this website are stored in a secure email account.

·      Your personal data that we collect via a Calendly booking is is stored securely in the our relevant Calendly account.

·      Your personal data is processed via Zoom only to facilitate a discovery call and may be stored by Zoom and we do not purposefully store your information via our Zoom account.

·      Your personal data is processed via Eventbrite only to facilitate your access to our events and we do not purposefully store your information via our Eventbrite account.

·      Your personal data that is gathered when you request access to our digital product(s) remains in our account on the platforms used to facilitate the transfer of the document to you i.e. Squarespace.

·      Your personal data that relates to any safeguarding risks that you disclose to us is stored in a secure email account, or a GDPR compliant encrypted database specifically designed for clinical records (Write-upp) and/or encrypted hard drives stored securely if discussed in supervision, or in all three of these data storage systems, depending on the nature of the risk issue and the amount and type of personal data we receive from you. Please see the ‘Client Privacy Statement’ under ‘Work With Me’ section of this website, for full details on how your personal data relating to risk is processed.

·      No method of transmission over the Internet, or method of electronic storage is 100% secure therefore we cannot guarantee the absolute security of your personal information.

How long do we keep your personal information

·      Your personal data that we gather from emails or queries via our contact page or Calendly bookings and this website are securely destroyed if your do not attend the discovery call, or we are not able to provide a service to you, or you decide you do not wish to access our service(s) and once we have dealt with you query and provided any signposting or onwards referrals and informed your referrer that you will not be seen in the service, where relevant.

·      Your personal data that we gather through our social media profiles is stored for long enough to respond if necessary and then retained whilst the service remains open, for auditing purposes.

·      Your personal data that we may gather through our Eventbrite profile is deleted from our Eventbrite account a week after the event.

·      Your personal data that we gather through cookies or other forms of Squarespace data is retained whilst the service remains open, for auditing purposes.

·      Your personal data that relates to any disclosures of any safeguarding risks is retained for 7 years after which it will be securely destroyed.

·      Your personal data that we gather from discovery calls and Calendly bookings are transferred to a GDPR compliant encrypted database specifically designed for clinical records (Write-upp) and/or encrypted hard drives if you take up therapy or coaching sessions and retained for 7 years after which it will be securely destroyed. Please see the ‘Client Privacy Statement’ under ‘Work With Me’ section of this website, for full details.

Your data protection rights

Under data protection law, you have rights including:

• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

• Your right to access - You have the right to ask us for copies of your personal information (commonly known as a "data subject access request"). This right always applies. There are some exemptions, which means you may not always receive all the information we process.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at [info.coopoosamypsychology@protonmail.com] if you wish to make a request. You can see more information on your data protection rights on the ICO website via the following link:

https://ico.org.uk/global/privacy-notice/your-data-protection-rights/

Please ensure that the personal data you provide to us is accurate and up-to-date and inform us immediately if you suspect any unauthorised access to your data. If you suspect that your personal data has been compromised, please contact us immediately at [info.coopoosamypsychology@protonmail.com]. Please also provide a detailed description of the suspected breach and any evidence you may have.

How to complain

If you have any concerns about the use of your personal data within this website, our social media profiles or emails, you can make a complaint to [info.coopoosamypsychology@protonmail.com].

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:           

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

Changes to this statement

We may update this ‘General Privacy Statement’ from time to time and we will notify you of these via a pop-up announcement on this website.

Thank you for taking the time to read this statement.