This Privacy Notice explains in detail the types of personal data we may collect about you when you interact with us. It also explains how we’ll store and handle that data, and keep it safe.
We know that there’s a lot of information here, but we want you to be fully informed about your rights, and how Re…root uses your information about you.
We hope the following sections will answer any questions you have but if not, please do get in touch with us.
Re…root is a private talking therapy practice based at 8 King Street, Richmond, TW9 1ND. Re…root is formally known as Re…root Ltd., for simplicity throughout this notice, ‘Re…root’, ‘us’ and ‘we’ means Re…root Ltd.
The law on data protection sets out a number of different reasons for which a company may collect and process your personal data, including:
In specific situations, we can collect and process your data with your consent.
For example, when you opt in to receive helpful updates on our website or on our feedback form.
In certain circumstances, we need your personal data to comply with our contractual obligations.
For example, we collect your personal information from your first enquiry to us, whether you contact us by webform, email or telephone, so that we can provide you with our therapy services.
If required by law, we may need to share your data.
In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our therapy service and which does not materially impact your rights, freedom or interests.
For example, we may undertake anonymised statistical analysis to improve our services (we won’t be able to identify individuals from this data)
We want to give you the best possible client experience. The data privacy law allows this as part of our legitimate interest in understanding our clients and providing the highest levels of service.
Of course, if you wish to change how we use your data, you’ll find details in the ‘What are my rights?’ section below.
Remember, if you choose not to share your personal data with us, or refuse certain contact permissions, we might not be able to provide the service you’ve asked for.
Here’s how we’ll use your personal data and why:
We know how much data security matters to all our customers. With this in mind we will treat your data with the utmost care and take all appropriate steps to protect it.
Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected.
At the end of that retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
We sometimes share your personal data with third parties as part of delivering our service to you, under circumstances specified in the therapy agreement to help us maintain your wellbeing and safety, when required by law and to handle complaints.
For example, health insurance providers, other health professionals, your therapist and payment service providers.
Here’s the policy we apply to those organisations to keep your data safe and protect your privacy:
Sometimes we might need to share your personal data with third parties eg where relevant for a health insurance provider outside the European Economic Area (EEA), such as the USA.
The EEA includes all EU Member countries as well as Iceland, Liechtenstein and Norway. For example, this might be required in order to provide you a service, process your payment details or provide support services.
If we do this, we have procedures in place to ensure your data receives the same protection as if it were being processed inside the EEA. For example, our contracts with third parties stipulate the standards they must follow at all times. If you wish for more information about these contracts please contact our Data Protection Officer.
Any transfer of your personal data will follow applicable laws and we will treat the information under the guiding principles of this Privacy Notice.
An overview of your different rights
You have the right to request:
To ask for your information, please contact the Data Protection Officer, Re...root, 8 King Street, Richmond-upon-Thames, TW9 1ND, or email firstname.lastname@example.org. If we choose not to action your request we will explain to you the reasons for our refusal.
Your right to withdraw consent
Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent.
Where we rely on our legitimate interest
In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.
If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.