Privacy Policy
Why this policy exists
This policy explains how I collect, use, and protect your personal information. It complies with:
UK General Data Protection Regulation (UK GDPR)
Data Protection Act 2018
Guidance from the Information Commissioner’s Office (ICO)
What information I collect
Name, address, phone number, email
Emergency contact details
GP Details
Health and therapy-related information (including session notes)
Payment details
Why I collect your information
To:
Provide therapy safely and effectively
Keep records as required by HCPC standards and UK law
Communicate about appointments
Manage payments
Lawful basis for processing
Under UK GDPR:
You give consent for therapy
It is necessary for health care purposes
Confidentiality and Consent
Your information and what you share in therapy sessions are confidential. I will not share details without your consent, except when:
Required by law (e.g., safeguarding concerns)
There is a serious risk of harm to you or others
Before therapy begins, you will be asked to sign a Consent Form confirming you understand how your data is used and stored.
How I store your information
Electronic records: secure, password-protected system
No marketing use
How long I keep your information
Seven years after therapy ends, then securely destroyed.
General enquiries are deleted after seven days.
Sharing your information
Only with your consent or when legally required.
Your rights
You can:
Request a copy of your data
Correct inaccurate information
Contact details
Patience Mlangeni
HCPC Registered Drama Therapist
Email: contact@pmdramatherapy.com