GDPR statement
I am registered with the Information Commissioner’s Office (ICO). This policy explains what personal data I collect and what I use it for.
What data do I keep and why do I need it?
Name and age
This is basic information that helps me get to know you.
Address, email address and phone number
I use these details to contact you about your sessions. I will mainly use the method you first contacted me on, but if I cannot reach you I may try a different method.
Website enquiries
If you use the contact form, I use your name, email address, optional phone number and message only to read and respond to your enquiry. Contact-form details are not added to the marketing mailing list.
Free resources
If you request a free resource, I use your name, email address, phone number where requested, and the resource you chose to deliver it and keep a record of the request.
Website analytics
If you accept optional analytics, Google Analytics 4 and PostHog collect basic usage information, such as pages viewed, approximate location, device type and how you found the site. This is linked to a random browser identifier rather than your name or contact details. I use it to understand and improve the website. PostHog session recording, automatic interaction capture and person profiles are disabled.
Next of kin or GP details
If I am worried that you are at risk, I may need to contact your next of kin or GP where I can. I will let you know if I need to do this whenever it is safe and appropriate.
Session notes
I keep brief, anonymised notes of our sessions as hard copies.
Will I share your data?
It is very unlikely that I will share your data. I will not sell it or use it for unethical reasons. I may have to share information if my notes are required by a court, or if you or someone you tell me about is at risk of harm.
I use Resend as an email service provider to deliver requested resources, send website enquiries to me and process the contact and delivery information needed to provide those services on my behalf.
How will I store your data?
Information is mainly stored as hard copy in a locked filing cabinet. After our work is finished, data identified only by your initials is transferred to a password-protected computer. Your phone number may be stored in my business phone with your first name and last initial. Only I access this information.
Website enquiry and resource-request emails are also held in my protected business email account. Email delivery records are held securely by Resend for the purpose of providing the email service.
How long will I keep your data?
- Session notes identified by your initials are kept for five years.
- Other documents containing personal information are shredded one year after our work finishes.
- Your phone number is deleted from the business phone one month after our work finishes.
- Website enquiries and delivery records are kept only for as long as they are reasonably needed to respond, administer the request and meet legal obligations.
Questions about your information
To ask about the information I hold, email helenrebootyourmind@gmail.com.
