Our Website Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit https://www.steppingstonespractice.co.uk (the “Site”).

Personal information that we collect

How we use your personal information
We use the Contact Information that we collect generally to fulfill any contact requests made through the Site.
When appropriate in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
Sharing your personal information
We share your Personal Information with third parties to help us use your Personal Information, as described above. We also use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
Do not track behaviour
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.
Your Rights
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
Data retention
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.
Changes to this policy
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
Contact us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at privacy@steppingstonespractice.co.uk

Our Therapy Privacy Policy

Stepping Stones Practice will be what’s known as the ‘Controller’ of the personal data you provide to us. We only collect data relevant to you/your child’s therapy which will be stored on a password protected and encrypted drive or cloud-based server. The information that we collect includes but is not limited to name, address, email, phone number and circumstances around which you/your child requires therapy.

Why we need your data

We require this data to create a tailored therapy session to fit your/your child’s needs and outcomes. Data regarding contact information and addresses are taken to allow us to reach in the event of a change in circumstances or for us to pass on to the emergency services should you/your child inform us outside of a session that you are currently a risk to the safety of yourself or others. We will not collect any personal data from you/your child we do not need in order to provide and oversee this service to you/your child.

What we do with your data

All the data processed will remain confidential between you/your child and the therapist, however, the therapist may talk about your case with all your personal information redacted in a supervision capacity with their supervisor/supervision team (other therapists) in order to provide you with the best service possible. We will not pass your/your child’s data onto any other person or organisation without your explicit prior consent.

How long we keep your data

We are required by our governing association membership to keep records of our clients for adults for 8 years from the completion of their therapy. For clients under the age of 18, we are required by GDPR law to keep records until they turn 21 or for 8 years from the end of their therapy (whichever is greater).
This includes both information about why you/your child are seeking therapy and the notes taken at your/your child’s session. Paper documents will be stored in locked files and then will be shredded once the relevant time has passed since completion of therapy (see above for length of time required).

What are your rights?

If at any point you believe the information we process is incorrect you can request to see this information and have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, you can contact us to have the matter investigated. lydia@steppingstonespractice.co.uk
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office.