GDPR Policy for D9 Therapy and Wellness
Respecting Your Privacy
At D9 Therapy and Wellness, we are committed to protecting your personal information in compliance with the General Data Protection Regulation (GDPR). This policy outlines how we collect, use, and protect your data.
Data We Collect
We may collect and process the following personal information:
Contact details (phone number, email address, and postal address) for communication related to your sessions.
Personal data provided during intake and counselling sessions, securely stored for the required legal retention period.
Why We Collect Your Data
Your data is collected and used solely to:
- Provide counselling services.
- Communicate with you regarding appointments or related matters.
- Refer you to one of our qualified therapists when you reach out for assistance.
- Comply with legal and professional obligations.
Sharing Your Data
If you contact us seeking counselling services, your contact information may be shared with one of our qualified therapists to ensure you receive the appropriate support. Your data will not be shared with anyone else outside of this referral process.
Retention of Data
Adult clients: Records are retained for a period of 7 years after the end of the counselling relationship.
Clients under 18: Records are retained until the client reaches 18, plus an additional 7 years.
Your Rights Under GDPR
As a client, you have the right to:
- Access Your Data: Request a copy of the personal data we hold.
- Request Deletion: Ask for your data to be deleted when no longer necessary.
- Amend Data: Correct inaccuracies in your data.
- Data Portability: Request a secure transfer of your data to another provider, where applicable.
To exercise your rights, please contact us at:
Email: d9therapy@gmail.com
Confidentiality and Exceptions
We are committed to maintaining your confidentiality. However, there are circumstances where confidentiality may be legally or ethically limited, including:
- Risk of harm to yourself or others.
- Disclosure of abuse or criminal activity.
- Legal requirements, such as court subpoenas.
In such cases, we will discuss the need to share information whenever possible.
How We Protect Your Data
Data is stored securely in compliance with GDPR standards.
Emails and text messages are deleted after one month unless required for legal reasons.
Personal data shared during supervision does not include identifying details.