Customer privacy notice

---

This privacy notice tells you what I will do with your personal information.

Contact details

Pedro Daniel Therapy

5 Falkland Avenue, London, England, N11 1JS

Email contact@pdanieltherapy.com

What information I collect, use, and why

I collect or use the following information to provide and improve services for clients and to protect client welfare:

· Names and contact details

· Date of birth

· Emergency contacts 

· GP registration

· Session information

· Website user information (including pages visited and cookie tracking).

I also collect or use the following special category information to provide and improve services for clients and to protect their welfare. This information is subject to additional protection due to its sensitive nature:

· Data concerning your health

· Sex life information

· Sexual orientation information.

As a private therapist, I will process clients’ notes and health-related data for medical diagnosis, healthcare provision, social care, treatment, and the management of health or social care systems and services. This obligation requires the processing to be carried out by me, subject to the duty of professional secrecy (confidentiality). 

I collect or use the following information to comply with legal requirements:

· Name

· Date of birth

· Contact information

· Session notes are kept to a minimum, containing factual, practical and informational content.

Lawful bases and data protection rights

Under UK data protection law, I must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

The lawful basis I rely on may affect your data protection rights, which are outlined briefly below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

· Your right of access - You have the right to ask me for copies of your personal information. You can request additional information, such as details about where I obtain personal information and with whom I share it. There are some exemptions, which means you may not receive all the information you ask for. Read more about the right of access.

· Your right to rectification - You have the right to ask me to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.

· Your right to erasure - You have the right to ask me to delete your personal information. Read more about the right to erasure.

· Your right to restriction of processing - You have the right to ask me to limit how I can use your personal information. Read more about the right to restriction of processing.

· Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing.

· Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you. Read more about the right to data portability.

· Your right to withdraw from the contract – When I use the contract as my lawful basis, you have the right to withdraw from the contract at any time. Read more about the right to withdraw consent.

If you make a request, I must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact me using the contact details at the top of this privacy notice.

My lawful bases for the collection and use of your data

My lawful bases for collecting or using personal information to provide and improve products and services for clients are:

· Contract – I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

· Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life-sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.

My lawful bases for collecting or using personal information to protect client welfare are:

· Contract – I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

· Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life-sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.

My lawful bases for collecting or using personal information for legal requirements are:

· Contract – I have to collect or use the information so I can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

· Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.

Where I get personal information from

· Directly from you

How long I keep information

I keep client records for six years from the date of your final session, in accordance with Common Law to protect against any potential claims of negligence or breach of contract. This period is also often a requirement of professional indemnity insurers. After this period, your records will be securely shredded, and digital records will be permanently deleted or anonymised.

Who I share information with

Data processor GoDaddy

Operated by GoDaddy LTD, Business Registration Number: 08056399, Registered at 9 Princes Square, Harrogate, England, HG1 1ND.

This data processor does the following activities for me: manages the website and contact template.

Others I share personal information with

· Organisations I need to share information with for safeguarding reasons

· Professional or legal advisors

· Professional consultants

· Emergency services

· Clinical supervisor (I share anonymised clinical material with the supervisor). This person works to the same Code of Ethics.  

· Professional Executor - in the event of my death or mental or physycal incapacity a colleague therapist will contact you to inform you of this. This person works to the same Code of Ethics.  

I will not share information for marketing purposes.

How to complain

If you have any concerns about the use of your personal data, you can make a complaint to me using the contact details at the top of this privacy notice.

If you remain unhappy with how I used your data after raising a complaint with me, you can also complain to the ICO. My registration ICO number: ZB997083.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated: 13 Oct 2025