Privacy Notice
Privacy Notice
Rosily May Ltd is committed to protecting your privacy. To enable us to provide the highest level of service, we keep records that contain information about: you and your health; the care and treatment we have provided or plan to provide to you; and your academic results and targets with regards to private tuition. We are committed to being fair, transparent and open.
This Privacy Notice explains ‘Who we are’, ‘How we receive information about you’, and ‘What we do with that information once we have it’.
We may make changes to our Privacy Policy from time to time. Any changes will be updated on our website.
WHO WE ARE
Rosily May Ltd is a limited company in England and Wales, no. 14169554. The Registered Office address is: 9 Riverside, Waters Meeting Road, Bolton, Lancs, BL1 8TU, UK. We are a ‘data controller’ for the purposes of the Data Protection Act 1998 and (from 25 May 2018) the EU General Data Protection Regulation 2016/679 (“Data Protection Law”). This means we’re responsible for how we can use your personal information.
THE INFORMATION WE COLLECT
We collect personal information:
directly from you (e.g. during phone conversations, email exchanges and forms you complete)
from a third party acting on your behalf with your consent (e.g. a GP, Psychiatrist or other health professional, school, etc.)
when we generate it ourselves (e.g. client notes)
from publicly available sources, where appropriate
The information we collect from you is considered a special category of personal data and we process this information in accordance with Article 9 section (iii) the provision of Health or Social Care. GDPR requires obligations of confidentiality which is covered by our therapists’ code of conduct.
HOW WE WILL USE YOUR INFORMATION
We will use your information in order to provide psychotherapy and educational services to you. We will only use information collected lawfully in accordance with the EU General Data Protection Regulation 2016/679 (“Data Protection Law”) and will not use any information we may hold about you for any purpose other than that for which it was collected, unless we have gained your consent, which you are entitled to withdraw at any time. We do not sell personal information.
WHO WE CAN SHARE YOUR INFORMATION WITH
We have a legal obligation to share information with you upon request. With your consent, we may share your information with other professionals involved in your care, such as your GP, school or university.
There are, however, some instances where clients cannot opt out of having their information shared and this information may be shared without explicit or implied consent. These instances may include:
Where the sharing is mandated by law or court order,
Where there are sufficient safeguarding or vulnerability concerns, or
For the health and safety of others.
HOW LONG WE’LL KEEP YOUR INFORMATION
The personal information collected from you and subsequent brief therapy or educational notes are entered into our GDPR compliant system. This information is only accessed by professionals involved in your care or education and will be kept for as long as you have a relationship with us and then for 8 years following the end of our work together.
YOUR RIGHTS
You have a number of rights relating to your information, e.g., to see what we hold, to ask us to share it with another party, ask us to update incorrect or incomplete details, to object to or restrict processing of it, to make a complaint etc.
If you have any further questions after reading this notice, please contact the Data Protection Officer via: info@rosilymay.co.uk or in writing at the registered address above.