Privacy Policy
Marie Church Cognitive Behavioural Services is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Marie Church Cognitive Behavioural Services is the data controller responsible for your personal data.
Contact details:
Email: marie.church@mariechurchcbt.co.uk
What information we collect
We may collect and process the following information:
- Personal details such as name, email address and telephone number
- Information provided via contact forms or correspondence
- Information relevant to your enquiry or referral
- Clinical or health information where appropriate for therapy or occupational health services
How we collect information
We collect information when you:
- Complete a contact form on our website
- Contact us by email or telephone
- Are referred for occupational health services
- Engage in therapy or clinical services
Legal basis for processing
We process personal data under the following lawful bases:
- Consent – where you contact us directly or request services
- Contract – where we provide services you have requested
- Legitimate interests – to manage enquiries and deliver services
Where we process health or clinical data (special category data), we do so under:
- Provision of health or social care
- Explicit consent where required
How we use your information
We use your data to:
- Respond to enquiries
- Provide therapy or occupational health services
- Manage appointments and communication
- Maintain appropriate records
- Meet professional and legal obligations
Data retention
We retain personal data only as long as necessary:
- General enquiries: up to 12 months
- Clinical records: typically 7–8 years after discharge in line with professional guidance
- Occupational health records: retained in line with contractual and legal requirements
Sharing your data
We do not share your personal data unless necessary:
- With your consent
- With referring organisations in occupational health cases
- Where required by law or safeguarding obligations
- With secure service providers such as IT systems and website hosting
All third parties are required to maintain confidentiality and security.
Data security
We implement appropriate measures to protect your data, including:
- Secure systems and storage
- Restricted access
- Confidential handling of clinical information
Your rights
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure where appropriate
- Restrict or object to processing
- Data portability where relevant
Requests can be made by contacting us directly.
Complaints
If you are concerned about how your data is handled, please contact us first.
You also have the right to complain to the Information Commissioner’s Office (ICO):
www.ico.org.uk
Website usage and cookies
Our website may use cookies to improve functionality and understand usage.
You will be asked to consent to non-essential cookies when visiting the site.
Contact
For any questions about this policy or your data:
Marie Church
Email: marie.church@mariechurchcbt.co.uk