Privacy Policy

Peter Ison Therapies Privacy Policy

Peter Ison trading as Peter Ison Therapies
Effective Date: 28th July 2025 (Last Updated: August 2026)

At Peter Ison Therapies, I take your privacy very seriously. This privacy notice explains how I collect, use, store, and protect your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I Am

I am Peter Ison, a self-employed therapist practicing in Lincolnshire. Under UK data protection law, I am the Data Controller responsible for your personal information.

Name: Peter Ison (trading as Peter Ison Therapies)
Email: peter@peterisontherapies.co.uk
Telephone: 07500 137 365
Correspondence Address: 4 Millbeck Drive, Lincoln, LN2 4UN
ICO Registration Number: ZC008610

—

2. What Information I Collect

When you contact me, enquire, or begin therapy, I may collect and process the following information:

Personal Data: Name, date of birth, address, telephone number, email address, and emergency contact details.
Financial Data: Payment details (processed securely via bank transfer or third-party processors like Square, PayPal, or Stripe).
Special Category Data (Sensitive Health Information): Relevant health/medical background, GP details, session notes, and assessment forms.

—

3. Lawful Basis for Processing

Under UK GDPR, I must have a valid legal reason to hold and process your personal data:

1. Standard Personal Data:
Contract: To deliver the therapy services you have requested and manage appointments.
Legal Obligation: To meet professional, tax, and legal insurance obligations.
Vital Interests: To protect life (e.g., if there is an immediate risk of serious harm to you or someone else).

2. Special Category (Health) Data:
Under Article 9 of the UK GDPR, sensitive health data and session notes are processed under Explicit Consent (Article 9(2)(a)) and/or for the Provision of Health or Social Care Treatment (Article 9(2)(h)).

—

4. How I Use Your Information

Your information is strictly used to:
Provide tailored, professional therapy sessions.
Communicate regarding appointments, admin, or cancellations.
Maintain clinical records as required by professional codes of ethics and insurance requirements.
Safeguard your health and safety while in my care.
Comply with accounting and legal obligations.

I will never sell, rent, or trade your personal data with third parties for marketing purposes.

—

5. Third Party Service Providers (Data Processors)

I use trusted third-party providers to help run my practice securely (e.g., payment gateways, email hosts, practice management tools, or online video platforms like Zoom). These providers only process your data on my explicit instructions and are bound by legal confidentiality and data protection agreements.

—

6. Storage and Retention of Data

I am committed to ensuring your data remains secure:

Paper Records: Physical notes are stored securely in a locked cabinet accessible only by me.
Electronic Records: Saved on encrypted, password-protected, and firewalled devices.
Email & Digital Correspondence: Reviewed and deleted regularly once no longer necessary.
Retention Period: In accordance with professional therapeutic guidelines and legal insurance requirements, your records will be stored for 7 years following our final session. After this timeframe, digital records are permanently erased, and paper records are securely shredded.

—

7. Confidentiality and Sharing Your Information

Everything discussed within sessions remains strictly confidential. Information is only shared outside our sessions in the following limited circumstances:

1. With Your Explicit Consent: For example, writing a report for your GP or employer at your request.
2. Clinical Supervision: As part of professional practice, I discuss client work with a qualified supervisor. Your identity is always kept completely anonymous.
3. Legal or Safeguarding Obligations: If required by a court of law, or if I reasonably believe there is a serious risk of harm to yourself, a child, or a vulnerable adult.

8. Cookies and Website Data

If you visit my website, small text files known as cookies may be placed on your device to ensure basic site functionality or to analyze general traffic patterns. You can adjust your browser settings to decline cookies at any time.

9. Your Data Rights

Under UK GDPR, you have the following rights regarding your personal information:

Right of Access: You can request a copy of the personal data and clinical notes I hold about you (Subject Access Request).
Right to Rectification: You can request that I correct any inaccurate or incomplete information.
Right to Erasure: You can ask me to delete your personal data (subject to my legal requirement to hold clinical notes for 7 years for insurance purposes).
Right to Restrict or Object: You can object to or restrict certain types of data processing.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.

10. Complaints and Questions

If you have any questions or concerns about how your personal data is handled, please contact me directly at:
📧 Email: peter@peterisontherapies.co.uk

If you remain unsatisfied with how your data has been handled, you have the right to lodge a complaint with the UK regulator:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
🌐 Website: [www.ico.org.uk](https://www.ico.org.uk)
📞 Tel: 0303 123 1113