Privacy Policy - GDPR


1. Your Data Controller

  • Mary-Joy Johnson: Director - Wildways Therapy CIC
  • Contact: info@wildwaystherapy.co.uk
  • Registered office: Conscious Accounting, 2 Station Road, Leighton Buzzard, England, LU7 2NA 


2. What Information We Collect

As a psychotherapy service we collect and process personal and "special category" (health) data to provide therapy safely and effectively. This may include: 

  • Basic identifiers: Name, date of birth, address, occupation.
  • Contact information: Email address, phone number, emergency contact.
  • Sensitive data: GP details, brief clinical/session notes, and relevant medical/psychiatric history.


3. Lawful Basis and Purpose of Processing

Under the UK GDPR, the lawful bases for processing your data are:

  • Contract: Processing is necessary to fulfill the therapy contract between us.
  • Special Category (Health): Processing is necessary for the provision of health/social care.
  • Legal Obligation: Where required by law (e.g., safeguarding disclosures, money laundering, or terrorism). 


4. How We Store and Protect Your Data

  • Your data is stored securely via password-protected encrypted devices and, where on paper, in a securely locked filing cabinet.
  • Session notes are kept anonymised/coded and in a securely locked filing cabinet. They are used solely to track our therapeutic work.


5. How Long We Keep Your Data

  • Data is retained for 7 years after the end of your therapy, or as per  insurance/professional body guidelines. After this period, electronic files are permanently deleted and paper records securely shredded. 


6. Sharing Your Data

I will not share your data with third parties except in the following limited circumstances:

  • With your explicit consent (e.g., writing a report for your GP or employer).
  • To comply with a legal obligation or if there is a perceived serious risk of harm to yourself or others.
  • With my clinical supervisor (notes are anonymised and your identity is protected). 


7. Your Rights

Under the UK GDPR, you have the right to access, correct, or request the deletion of your personal data. To exercise these rights, please contact Mary-Joy Johnson directly at: info@wildwaystherapy.co.uk


8. Data Protection Complaints Procedure

If you have any concerns or complaints regarding how I handle your personal information, please contact Mary-Joy Johnson directly at the email provided above. Under current UK data laws, they will: 

  • Acknowledge receipt of your complaint within 30 days.
  • Investigate the matter and keep you informed of the progress.
  • Provide you with a formal outcome. 

If you remain dissatisfied with the response, you can escalate your concerns to the Information Commissioner's Office (ICO). Click here to direct you to the ICO or search https://ico.org.uk/make-a-complaint/