Privacy Policy – The Village Therapies
Last updated: [23/06/2026]
I am committed to protecting your privacy and handling your personal data in a safe, secure, and responsible way. This Privacy Policy explains how I collect, use, store, and share your personal information when you use The Village Therapies services, either via my website (thevillagetherapies.com), during therapy sessions, or in any other interaction with me.
1. Data Controller
I, Dolly Corbyn, am the data controller for the personal data I collect and process in the course of providing therapy services through The Village Therapies.
2. What Personal Data I Collect
I may collect the following types of personal data:
-
Contact information: such as your name, email address, phone number, and postal address.
-
Therapy-related information: including details shared during an initial enquiry, your presenting concerns, mental health history, and personal background.
-
Session and clinical notes: records maintained to support the therapeutic process.
-
Payment and billing information: where applicable, data required to process payments and maintain financial records.
-
Communication data: records of emails, messages, and other correspondence.
-
Website data: technical information such as IP address, browser type, device information, and website usage analytics.
-
3. Why I Collect and Use Your Data (Lawful Basis)
I process your personal data to:
-
Provide and manage therapy sessions.
-
Assess your suitability for therapy and tailor my approach to your needs.
-
Schedule appointments, send reminders, and manage bookings.
-
Maintain accurate clinical records in line with professional and legal obligations.
-
Comply with legal, safeguarding, and ethical responsibilities.
-
Communicate with you regarding appointments, invoicing, and service updates.
-
Improve my website and services through website analytics.
The lawful bases I rely on are:
-
Performance of a contract – to provide therapy services you have requested.
-
Compliance with legal obligations – where I am required to process information by law.
-
Legitimate interests – in operating a safe, effective, and professional therapy practice.
-
Consent – where required for specific activities.
As part of providing therapy services, I process special category data relating to your health and wellbeing. This information is processed in accordance with UK GDPR provisions relating to the provision of health and counselling services and the management of health and social care services.
4. How I Store and Secure Your Data
I store personal data securely using encrypted electronic systems and, where relevant, locked physical storage.
Access to your data is limited to me and, where appropriate, my clinical supervisor. I take appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, loss, or destruction.
5. How Long I Keep Your Data (Data Retention)
Clinical records and session notes are retained in accordance with professional and ethical guidance and are generally kept for up to 7 years after the end of therapy, unless a different legal or professional requirement applies.
Administrative and financial records are retained for as long as necessary to meet legal, tax, accounting, and professional obligations.
Once personal data is no longer required, it will be securely deleted or anonymised.
6. When and With Whom I Share Your Data
I will not share your personal data with third parties except in the following circumstances:
-
With your explicit consent, for example if you ask me to communicate with your GP or another professional.
-
Where disclosure is required by law.
-
Where there is a safeguarding concern or risk of serious harm.
-
With trusted service providers who support my practice, such as secure cloud storage, website hosting, email, or payment processing providers. These providers are required to protect your personal data and only process it for specified purposes.
-
During clinical supervision, where anonymised case material may be discussed to support safe and ethical practice.
Where personal data is transferred outside the UK, appropriate safeguards will be in place in accordance with UK data protection law.
7. Your Rights
You have rights under UK data protection law, including:
-
The right to access the personal data I hold about you.
-
The right to request correction of inaccurate or incomplete data.
-
The right to request erasure of your personal data in certain circumstances.
-
The right to restrict or object to certain processing activities.
-
The right to withdraw consent where processing is based on consent.
-
The right to data portability where applicable.
To exercise any of these rights, please contact me using the details below.
If you have any concerns about how I handle your personal data, please contact me in the first instance so that I can try to resolve the matter.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for data protection matters.
8. Cookies and Website Analytics
My website may use cookies and similar technologies to help it function effectively and to understand how visitors use the site.
Analytics information is collected in an aggregated or pseudonymised form where possible and is used to improve website performance and user experience.
You can control or disable cookies through your browser settings.
9. Data Breaches
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, I will notify the ICO where required and inform affected individuals in accordance with my legal obligations.
10. Changes to This Policy
I may update this Privacy Policy from time to time to reflect changes in my services, systems, or legal obligations. Any updates will be published on my website and the "Last updated" date will be amended accordingly.
11. Contact Me
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact me:
Email: dolly@thevillagetherapies.com
Address: Wigginton Methodist Church, The Village, Haxby, York YO32 2JJ