Security
We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online and manually.
We will not disclose your information to any other third parties without your explicit permission.
The only exception to this statement is a legal duty of care that we have for all clients which requires us to make other agencies aware if, in our professional judgement, there is a situation with regard to your health and wellbeing. We would take all reasonable steps to inform you of our intention to do this.
Your rights
1. The right to be informed
You have the right to be informed about the collection and use of your personal data. This is a key transparency requirement under the GDPR.
What we collect
We collect the following information from each client, as a minimum requirement for insurance purposes:
· Full name
· Address
· Contact information - email address & telephone number
· Name, address and contact number of your Doctor
We also
- Ask for health and wellbeing information – this is voluntary and it’s up to you how much you disclose.
- Take notes during sessions
What we do with the information we gather
We require this information to understand your needs and provide you with a better service, and in particular, for the following reasons:
· To be able to contact you with regard to appointments
· To contact your GP, if necessary, and with your explicit approval
· To record session discussions for future reference and to capture details of therapy delivered.
· To send you our monthly newsletter, if you chose to receive it
· From time to time, we may also use your email information to contact you for market research purposes.
How long we keep your information
· Online Health Profile form – this will be kept for 6 months after the Health Profile Review if no further consultations take place.
· Online Health Profile Review – will be kept for 10 years if further consultations take place (this is a requirement of our insurance provider).
· Email address for newsletter – an email will be sent each March seeking confirmation that you want to stay on the newsletter mailing list.
Controlling your personal information
We will not sell, distribute or lease your personal information to any third parties unless we have your permission or are required by law to do so.
2. The right of access
You have the right to access your personal data and supplementary information so that you know what we hold and can verify the lawfulness of the processing.
3. The right to rectification
You have the right to have inaccurate personal data rectified or completed if it is incomplete.
You can make a request for rectification verbally or in writing, and we have to respond within one month.
4. The right to erasure
You have a right to have personal data erased – this is also known as ‘the right to be forgotten’.
You can make a request for rectification verbally or in writing, and we have to respond within one month.
Please note – this right is not absolute and only applies in certain circumstances.
5. The right to restrict processing
You have the right to request the restriction or suppression of your personal data.
Under this right, we are permitted to store the personal data, but not use it.
An individual can make a request for restriction verbally or in writing.
You can make a request for rectification verbally or in writing, and we have to respond within one month.
Please note - this is not an absolute right and only applies in certain circumstances.
6. The right to data portability
You have the right to data portability. This allows you to obtain and reuse your personal data for your own purposes across different services.
This right allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability. Doing this enables you to take advantage of applications and services that can use this data to find them a better deal or help them understand their spending habits.
7. The right to object
You have the right to object to:
· processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
· direct marketing (including profiling); and
· processing for purposes of scientific/historical research and statistics.
8. Rights in relation to automated decision making and profiling.
The GDPR has provisions on:
· automated individual decision-making (making a decision solely by automated means without any human involvement); and
· profiling (automated processing of personal data to evaluate certain things about an individual). Profiling can be part of an automated decision-making process.
If you would like to know more, or would like to exercise any of your rights detailed above, please call 07973 305093 or write to i[email protected] or
Reconnecting You, 158 Elvaston Road, North Wingfield, Derbyshire S42 5GA
©2026 Reconnecting You. All Rights Reserved.