Privacy Policy

Last updated: January 2025

1. Introduction

Kitt Therapy Services ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Kitt Therapy Services is the data controller for the personal information we collect and process. You can contact us at:

  • Email: sarah@kittpsychological.com
  • Address: [Please insert your business address]

3. Information We Collect

3.1 Personal Information

We may collect the following types of personal information:

  • Contact information (name, email address, phone number)
  • Health and therapy-related information (with explicit consent)
  • Payment and billing information
  • Communication records and session notes
  • Technical information about your use of our website

3.2 Sensitive Personal Data

As a psychological services provider, we process special categories of personal data (health information) under Article 9 of UK GDPR. We only process this information with your explicit consent and for the provision of healthcare services.

4. How We Use Your Information

We use your personal information for the following purposes:

  • Providing psychological and therapeutic services
  • Communication regarding appointments and treatment
  • Billing and payment processing
  • Legal and regulatory compliance
  • Improving our services and website functionality
  • Responding to inquiries and providing customer support

5. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: For processing health information and marketing communications
  • Contract: For providing our services and managing appointments
  • Legal obligation: For regulatory compliance and safeguarding
  • Vital interests: In emergency situations to protect health and safety

6. Information Sharing and Disclosure

We maintain strict confidentiality and only share your information in limited circumstances:

  • With your explicit consent
  • When required by law or court order
  • In emergency situations to prevent harm
  • With professional supervisors (anonymised where possible)
  • With trusted service providers who assist in our operations (under strict confidentiality agreements)

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

  • Encryption of sensitive data
  • Secure storage systems
  • Access controls and authentication
  • Regular security assessments
  • Staff training on data protection

8. Data Retention

We retain your personal information for as long as necessary to:

  • Provide ongoing therapeutic services
  • Comply with professional and legal requirements
  • Handle any complaints or claims

Clinical records are typically retained for 7 years after the last contact, or until age 25 for clients under 18, in accordance with professional guidelines.

9. Your Rights

Under UK GDPR, you have the following rights:

  • Right to information: About how we use your data
  • Right of access: To request a copy of your personal data
  • Right to rectification: To correct inaccurate information
  • Right to erasure: To request deletion of your data (subject to legal requirements)
  • Right to restrict processing: To limit how we use your data
  • Right to data portability: To receive your data in a portable format
  • Right to object: To object to certain uses of your data
  • Right to withdraw consent: Where processing is based on consent

10. Cookies and Website Analytics

Our website may use cookies and similar technologies to improve user experience. We will request your consent for non-essential cookies. You can manage cookie preferences through your browser settings.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

  • Email: sarah@kittpsychological.com
  • Subject: Data Protection Inquiry

14. Complaints

If you are not satisfied with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

This Privacy Policy is designed to comply with UK data protection laws. However, we recommend seeking legal advice to ensure full compliance with all applicable regulations for your specific practice.