Privacy Policy
Why this policy exists
This policy explains how I collect, use, and protect your personal information. It complies with:
UK General Data Protection Regulation (UK GDPR)
Data Protection Act 2018
Guidance from the Information Commissioner’s Office (ICO)
What information I collect
Name, address, phone number, email
Emergency contact details
GP Details
Health and therapy-related information (including session notes)
Payment details
Why I collect your information
To:
Provide therapy safely and effectively
Keep records as required by HCPC standards and UK law
Communicate about appointments
Manage payments
Lawful basis for processing
Under UK GDPR:
You give consent for therapy
It is necessary for health care purposes
Confidentiality and Consent
Your information and what you share in therapy sessions are confidential. I will not share details without your consent, except when:
Required by law (e.g., safeguarding concerns)
There is a serious risk of harm to you or others
Before therapy begins, you will be asked to sign a Consent Form confirming you understand how your data is used and stored.
How I store your information
Electronic records: secure, password-protected system
No marketing use
How long I keep your information
Seven years after therapy ends, then securely destroyed.
Sharing your information
Only with your consent or when legally required.
Your rights
You can:
Request a copy of your data
Correct inaccurate information
Contact details
Patience Mlangeni
HCPC Registered Drama Therapist
Email: contact@pmdramatherapy.com