Privacy Policy – The Village Therapies
​Last updated: 19/11/2025
​
I am committed to protecting your privacy and handling your personal data in a safe, secure, and responsible way. This Privacy Policy explains how I collect, use, store, and share your personal information when you use The Village Therapies services, either via my website (thevillagetherapies.com), during therapy sessions, or in any other interaction with me.
1. Data Controller
I, Dolly Corbyn, am the data controller for the personal data I collect and process in the course of providing therapy services through The Village Therapies.
​
2. What Personal Data I Collect
​
I may collect the following types of personal data:
​
-
Contact information: such as your name, email address, phone number, and postal address.
-
Therapy-related information: this includes details you share during an initial enquiry (e.g., your availability), your presenting concerns, mental health history, and personal background.
-
Session and clinical notes: I keep clinical notes and records that support the therapeutic process.
-
Payment and billing information: if applicable, I collect data needed to process payments (e.g. invoice details).
-
Communication data: if we email or message, I may keep transcripts or records of our correspondence.
-
Website data: when you use my website, I may collect technical data (e.g., IP address, browser type) and analytics data to help me improve my website.
3. Why I Collect and Use Your Data (Lawful Basis)
​
I process your personal data for the following purposes:
​
-
To provide and manage your therapy sessions.
-
To assess your suitability for therapy and tailor my approach to your needs.
-
To schedule appointments, send reminders, and manage bookings.
-
To keep accurate clinical records in line with professional and legal obligations.
-
To comply with any legal or safeguarding requirements (for example, if there is risk of serious harm).
-
To communicate with you about administrative matters (e.g., changes to service, invoicing).
-
To analyse anonymous website usage to help me improve my services.
The lawful basis for processing includes contractual necessity, legal obligations, and legitimate interests in running a therapy practice. In some cases (for non-essential processing), I may rely on your consent.
4. How I Store and Secure Your Data
​
-
I store personal data securely, using encrypted electronic systems and, where relevant, locked physical storage.
-
Access to your data is limited to me (or my authorised clinical supervisor, when needed) and is only used for the purposes described in this Privacy Policy.
-
I take appropriate technical and organisational measures to protect your data from unauthorised access, disclosure, alteration, or destruction.
5. How Long I Keep Your Data (Data Retention)
​
-
Clinical and session notes: I retain these for a period consistent with professional ethical guidance (for example, 5–7 years), unless you ask me to do otherwise, or a different legal requirement applies. bacp.co.uk
-
Contact and administrative data: I will keep this for as long as is necessary to fulfil my obligations (e.g., for billing, follow-up) and to meet any relevant legal requirements.
-
Once your data is no longer needed, I will securely delete or anonymise it.
6. When and With Whom I Share Your Data
​
I will not share your personal data with third parties except in the following circumstances:
​
-
With your explicit consent, for example, if you ask me to liaise with your GP or other professionals.
-
If required by law (e.g., safeguarding concerns, risk of serious harm).
-
With service providers who support my work (for instance, a secure cloud storage provider or payment processor). In such cases, I ensure they are GDPR compliant and only process the minimum data necessary.
-
For clinical supervision: I may discuss anonymised case material in supervision, but I will protect your identity and confidentiality.
7. Your Rights
​
You have certain rights under UK data protection law, including:
​
-
The right to access personal data I hold about you (Subject Access Request)
-
The right to correct any inaccurate or incomplete data
-
The right to request deletion of your data (in certain circumstances)
-
The right to restrict or object to certain types of processing
-
The right to withdraw any consent you have given
To exercise your rights, you can contact me at dolly@thevillagetherapies.com. I will respond to requests in a timely manner, as required under UK GDPR.
​
8. Cookies and Website Analytics
​
-
My website uses cookies or similar tracking technologies to understand how visitors use the site and to improve your experience.
-
The data collected for website analytics is anonymous and does not identify you personally.
-
You can control or delete cookies via your browser settings.
9. Data Breaches
​
If a data breach occurs that is likely to result in a risk to your rights and freedoms, I will notify you and, where required, report the breach to the Information Commissioner’s Office (ICO) within 72 hours.
10. Changes to This Policy
​
I may update this Privacy Policy from time to time (for example, if my systems change or laws are updated). I will post any significant changes on my website. The “Last updated” date at the top will reflect this.
11. Contact Me
​
If you have any questions, concerns, or would like to exercise any of your data protection rights, you can contact me:
​
-
Address: Wigginton Methodist Church, The Village, Haxby, York YO32 2JJ