Introduction
Healing Is Here Therapy Practice ("we", "our", "us") is committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or engage with our services.
Data Controller
Data Controller: Marcus Sorensen
Trading as: Healing Is Here Limited
ICO Registration: Registered with the Information Commissioner's Office
Email: marcus@healingishere.com
Phone: 0794 125 4035
Information We Collect
Website Usage
When you visit our website, we may automatically collect:
- IP address
- Browser type and version
- Pages visited and time spent on pages
- Referring website
- Device information
Contact Forms
When you submit a contact form or enquiry, we collect:
- Name
- Email address
- Phone number (if provided)
- Message content
- Any other information you choose to provide
Client Information
If you become a client, we collect and store information necessary for providing therapy services, including:
- Contact details
- Emergency contact information
- GP details
- Session notes and clinical records
- Payment information
How We Use Your Information
Website Enquiries
Information submitted through contact forms is used to:
- Respond to your enquiry
- Provide information about our services
- Arrange initial consultations
Therapy Services
Client information is used to:
- Provide therapy services
- Maintain clinical records as required by professional bodies (CNHC, BACP)
- Process payments
- Comply with legal and regulatory obligations
- Communicate about appointments and therapy
Cookies and Tracking
Our website uses minimal tracking technology:
Essential Cookies
We use session cookies to ensure the website functions correctly. These are temporary and deleted when you close your browser.
Analytics
We do not currently use analytics cookies. If this changes, we will update this policy and seek your consent where required.
Third-Party Services
Our website may embed content from:
- YouTube: For video content. YouTube may set cookies when you watch embedded videos. See YouTube's privacy policy for details.
- Calendly: For appointment scheduling (if used). Calendly's privacy policy applies to scheduling interactions.
Data Storage and Security
Website Data
Contact form submissions are processed via Formspree and stored securely. We retain enquiry data for 12 months unless you request earlier deletion.
Clinical Records
Client therapy records are stored in accordance with professional requirements:
- Digital records are encrypted and stored on secure, password-protected systems
- Access is restricted to authorised personnel only
- Records are retained for 7 years after the end of therapy, as required by professional bodies
- After retention period, records are securely deleted
Video Sessions
Online therapy sessions are conducted via Zoom. Sessions are not recorded unless explicitly agreed. Zoom's privacy policy applies to video session data.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: When you submit contact forms or agree to communication
- Contract: To provide therapy services you have engaged
- Legal obligation: To comply with professional body requirements and UK law
- Legitimate interests: To respond to enquiries and maintain our practice
Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share data only in these circumstances:
Professional Consultation
Clinical information may be shared (anonymised where possible) with clinical supervisors as part of ongoing professional development and ethical practice.
Legal Requirements
We may disclose information if required by law or to:
- Comply with legal processes
- Respond to court orders or regulatory enquiries
- Protect safety (e.g., safeguarding concerns, risk of serious harm)
Service Providers
Third-party services that process data on our behalf:
- Formspree (contact form processing)
- Zoom (video therapy sessions)
- Calendly (appointment scheduling, if used)
These providers are contractually required to protect your data and use it only for specified purposes.
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (subject to legal and professional obligations)
- Right to Restrict Processing: Request that we limit how we use your data
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time (does not affect prior processing)
Note: Some rights may be limited by professional requirements to retain clinical records for specified periods.
To exercise any of these rights, please contact us at: marcus@healingishere.com
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be communicated to clients directly.
Contact and Complaints
Contact Us
If you have questions about this Privacy Policy or how we handle your data:
Email: marcus@healingishere.com
Phone: +44 794 125 4035
Make a Complaint
If you are unhappy with how we have handled your data, you can complain to:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk
Questions about privacy?
Get in touch if you would like to discuss how we handle your information.
Contact us