Effective Date: 1 January 2025
This Privacy Policy explains how Marking Therapy collects, uses, and protects your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and other applicable data protection laws globally. This policy is designed to meet the standards of professional bodies NCPS, BACP, and the Civil Mediation Council.
You consent to the practices outlined in this Privacy Policy by using this website and our services. Please review it carefully.
1. Definitions
- Personal Data: Any information relating to an identified or identifiable individual, such as name, email, or IP address.
- Processing: Any operation performed on personal data, such as collection, storage, or deletion.
- We/Us/Our: Marking Therapy, registered at 362 Stanhope Road, South Shields, NE33 4RB.
- Client/You: Any individual accessing our website or services.
- Website: https://markingtherapy.com.
2. Data Collection
We collect and process the following data:
- Website Interaction Data: IP address, browser type, and cookies to improve user experience.
- Personal Data: Name, contact details, date of birth, gender, and professional information.
- Special Category Data: Health or sensitive data relevant to therapy or mediation, with explicit consent.
3. How Data is Collected
- Directly: When you contact us, book services or provide data through our forms.
- Indirectly: Through cookies and analytics tools when you browse our website.
4. Legal Basis for Processing
We process your data under these legal bases:
- Legitimate Interests: For business improvements and professional obligations.
- Consent: When you explicitly agree to share sensitive information.
- Contractual Necessity: For service provision.
- Legal Obligation: To comply with professional or statutory requirements.
5. Data Use
We use your data for:
- Delivering services, including therapy and mediation.
- Internal record-keeping and compliance with professional body standards.
- Responding to inquiries and managing your account.
We do not sell or share your data with third parties for marketing purposes.
6. Sharing Data
We may share your data with:
- Legal authorities if required by law.
- Professional bodies (NCPS, BACP, Civil Mediation Council) for compliance and audit purposes.
- Third-party processors (e.g., payment platforms) with appropriate safeguards.
7. International Transfers
If data is transferred outside the UK or EEA, it will be safeguarded by appropriate mechanisms, such as Standard Contractual Clauses (SCCs) or adequacy decisions.
8. Data Security
We implement robust technical and organisational measures, including:
- Regular security audits and employee training.
- Secure servers with encrypted storage.
- Multi-factor authentication for system access.
9. Data Retention
We retain personal data only as long as necessary for:
- Service provision.
- Legal or professional compliance.
Backup copies may persist for compliance purposes.
10. Your Rights
You have the following rights under GDPR:
- Access: Request a copy of your data.
- Correction: Rectify inaccurate or incomplete data.
- Erasure: Request deletion of your data (subject to legal exemptions).
- Restriction: Limit processing of your data.
- Portability: Transfer your data to another controller.
- Objection: Object to data processing for legitimate interests.
To exercise these rights, contact [email protected].
11. Cookies
Our website uses cookies for functionality, analytics, and performance. You can manage cookie preferences via your browser.
12. Third-Party Links
Our website may contain links to external sites. We are not responsible for their privacy practices.
13. Changes to this Policy
This policy may be updated periodically. Changes will be posted on this page, and your continued use of our services constitutes acceptance of these changes.
Contact Information
If you have questions or concerns about this Privacy Policy, contact us at:
Email: [email protected]
Supervisory Authority
For complaints, contact the UK Information Commissioner’s Office (ICO) at ico.org.uk.