Dr Hannah Barnes – Website Privacy & Cookie Policy
Introduction
Welcome to Dr Hannah Barnes’s privacy policy.
Dr Hannah Barnes takes the privacy rights of all clients seriously and adopts a high standard of compliance and confidentiality when dealing with your data. This is a safe place for you to discuss your feelings and concerns, and services are delivered within a highly confidential environment. This privacy policy sets out how data is collected and processed through the use of this website.
1. Important Information and Who We Are
Purpose of this privacy policy
This privacy policy explains how Dr Hannah Barnes collects and processes your personal data through your use of this website, including any data you provide when purchasing services, signing up to communications, or making an enquiry.
This website is not intended for children and we do not knowingly collect data relating to children.
This policy should be read alongside any additional privacy notices provided at the time of data collection.
Controller
Dr Hannah Barnes is the data controller responsible for your personal data (referred to as “we”, “us” or “our”).
If you have any questions about this policy, please contact us using the details below.
Contact details
Name: Dr Hannah Barnes
Email:
Telephone: 01242 569951
You have the right to make a complaint to the Information Commissioner’s Office (ICO) (www.ico.org.uk), though we encourage you to contact us first.
Changes to this policy
This policy is reviewed regularly. Last updated: December 2023.
Third-party links
This website may include links to third-party websites. We are not responsible for their privacy policies.
2. The Data We Collect About You
Personal data means any information that can identify an individual.
- Identity Data: name, title, date of birth
- Contact Data: address, email, telephone
- Financial Data: payment details
- Transaction Data: details of services purchased
- Technical Data: IP address, browser type, device info
- Profile Data: preferences, feedback
- Usage Data: website interaction data
- Marketing Data: communication preferences
- Sensitive Data: health information relevant to therapy
We require explicit consent to process sensitive data.
If you fail to provide personal data
If required data is not provided, we may not be able to deliver services.
3. How Your Data Is Collected
- Direct interactions: forms, emails, phone calls
- Automated technologies: cookies and analytics
- Third parties: payment providers, analytics tools
4. How We Use Your Personal Data
We use your data when:
- Providing services
- Complying with legal obligations
- Operating legitimate business interests
Purposes for processing
| Purpose | Data Type | Lawful Basis |
|---|---|---|
| Registering clients | Identity, Contact | Contract |
| Providing services | Identity, Contact, Financial, Sensitive | Contract + Consent |
| Managing relationships | Identity, Contact, Profile | Legal + Legitimate Interest |
| Website improvement | Technical, Usage | Legitimate Interest |
Marketing
We may send communications based on consent or legitimate interest. You can opt out at any time.
6. Data Sharing
We may share data with service providers, professional advisers, and regulatory authorities where required.
7. International Transfers
Where data is transferred outside the UK/EEA, appropriate safeguards are in place.
8. Data Security
We implement appropriate security measures to protect your data.
9. Data Retention
We retain data only as long as necessary. Medical records are kept for 7 years (or longer for children as required by law).
Enquiry data is deleted after 1 month if no service proceeds.
10. Your Legal Rights
You have rights including:
- Access your data
- Correct inaccuracies
- Request deletion
- Restrict or object to processing
- Transfer your data
- Withdraw consent
Requests can be made via the contact details above.
Privacy Policy Agreement
If you are registering for therapy, please confirm that you have read and understood this policy.
