Privacy Notice

Who is responsible for your information?

Emma Rose, trading as Inner Bloom Therapy, is the data controller for her therapy practice. Her Information Commissioner’s Office registration number is ZB811939. You can contact Emma at info@innerbloomtherapy.uk or +44 7367 111142.

What information is used?

The website booking form asks for your name, email address and telephone number, and the appointment you choose. Please do not enter clinical information there. For therapy, Emma may separately collect your address, date of birth, GP and emergency contact details, health and medication information, assessments, safeguarding information and clinical notes. Billing and payment records are also kept.

Why is it used?

Emma uses personal information to arrange and provide therapy, communicate about appointments, keep appropriate clinical records, issue invoices and meet safeguarding and legal obligations. Booking and therapy administration rely on taking steps towards, or performing, your therapy agreement under Article 6(1)(b) UK GDPR. Records required by law rely on Article 6(1)(c). Website security and routine practice administration rely on Emma’s legitimate interests under Article 6(1)(f), balanced against your rights.

Health information is special category data. Where needed to provide therapy, Emma relies on the health or social care condition in Article 9(2)(h), with professional confidentiality safeguards. Any separate optional use that requires consent will be explained and requested separately. Booking acceptance of this notice is an acknowledgement, not a blanket consent to every use of health information or AI.

Who handles your information?

MyBizOnline OS handles online booking, appointment messages and billing administration. Clinical records are kept separately from the public website booking form. Other service providers support website hosting, video calls, secure communications and payments. Emma may discuss a case without identifying details in professional clinical supervision, or disclose information where required by law or necessary to respond to a serious safeguarding risk to you or another person.

Some technology providers may process data outside the UK. Contact Emma for information about the relevant provider, destination and safeguards for your information.

How long is it kept?

Emma’s stated practice policy is to retain clinical records for seven years after therapy ends, unless a legal, safeguarding or professional reason requires a different period. Booking and financial records are kept for the period needed for service administration and applicable accounting duties. Emma can explain the period applying to a particular record. Access controls and secure connections help protect records.

Your choices and rights

You may ask Emma for access to your data, correction, erasure where applicable, restriction, portability or to object to processing based on legitimate interests. You can also ask how a decision about your data was reached. Rights are subject to the circumstances and applicable professional or legal record-keeping duties. Email info@innerbloomtherapy.uk to make a request. If you remain concerned, you can complain to the Information Commissioner’s Office.

The website’s use of cookies and similar technologies is explained in the Cookie Policy.