Privacy Policy

PLEASE READ THIS POLICY CAREFULLY. IF YOU DO NOT ACCEPT THESE TERMS, YOU ARE ADVISED NOT TO USE THE WEBSITE OR APP 

This Privacy Policy is subject to regular review in order to ensure we remain compliant with data protection guidance and applicable legislation. You are encouraged to refer to this page on each visit to the website to ensure that you are up-to-date with our policies and practices in relation to the handling of personal data. 

We also have a practice Confidentiality Policy which is available on our website, upon request and which will also be verbally summarised at your first Wounded Healer session. 

This Privacy Policy is effective from 1st June 2024 

1. POLICY ACCEPTANCE 

This Privacy Policy applies to the website https://www.woundedhealer.co.uk (“website”) and shall include all personal data processed by us through direct mail, telephone or social media channels. Any reference to “you” or “your” means you, the user. 

Your acceptance of this Privacy Policy is deemed to occur upon your first use of the website. You are required to read and accept this Privacy Policy when you engage with us. 

2. POLICY STATEMENT 

Wounded Healer recognises the trust you place in us when you share personal data with us. We are committed to being open, honest and transparent with our use of personal data.

This Privacy Policy provides you with details of the personal data we collect when we engage with you, how we will use and look after your personal data, your privacy rights and how the law protects you. We will take all reasonable steps to ensure that personal data is safeguarded and kept in accordance with applicable data protection law. 

3. ABOUT US 

Wounded Healer launched in June 2024 as a contemporary, proactive and forward-thinking mental wellbeing service. All bookings are made directly via our Website. 

Wounded Healer Ltd is registered in England and Wales under company registration number 15139117. Our registered office address is 19 Cross Lane West, Gravesend DA11 7PZ, United Kingdom.

Where we manage personal data, we identify as a Data Controller and recognise and act on our obligations under applicable data protection law, including but not limited to the EU General Data Protection Regulation and the Data Protection Act 2018.

We are registered with the Information Commissioner’s Office (ICO), registration number ZB694798. 

For any issues relating to data protection the person responsible is Kevin Light. You can contact us in relation to data protection matters by email to info@woundedhealer.co.uk

4. WHAT PERSONAL DATA DO WE COLLECT? 

Personal data is any information relating to an identified or identifiable individual. It does not include data where the identity has been removed (i.e. anonymous data). We may collect, use, store and transfer different kinds of personal data about you when we engage with you. This may include: 

(a) Identity Data – title, first name, last name, date of birth or similar identifiers. If you interact with us through social media, this may include your social media username; 

(b) Contact Data – billing address, email address and telephone numbers; 

(c) Financial Data – bank account and payment card details; 

(d) Transaction Data – details about services we have provided to you; 

(e) Technical Data – includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the website; 

(f) Profile Data – your username and password, your preferences, feedback and 

survey responses; 

(g) Geographical Data – information setting out your primary address to control the 

use of location services in most mobile devices and desktop settings; 

(h) Usage Data – information about how you use our website and services; 

(i) Marketing and Communications Data – includes your preferences in receiving marketing from us and our third parties and your communication preferences. 

5. HOW DO WE COLLECT PERSONAL DATA? 

We use different methods to collect data from and about you, through: 

3.1 Special categories of data 

We collect some special category data that is relevant to the issues you present in the course of our counselling services. Examples of some of the sensitive information our Therapist may gather is: 

We will ask you some personal details about yourself – why you wish to attend Wounded Healer sessions, whether you have a medical diagnosis, if you are currently on medication, whether you are receiving clinical mental health treatment and whether you have had any suicidal thoughts in the last 6 months. These notes enable us to provide a safe and informed space for you with the therapist. It also ensures that some basic information about you can be made available to other therapists should you decide to change your therapist. Such information is only provided on a need to know basis. 

3.1.1 Children 

We do not market this website at those under 18 years old. Consistent with the GDPR we will never knowingly request personally identifiable information from anyone under the age of 18 years old. We will take appropriate steps to delete any personal data of individuals less than 18 years of age that has been collected on our website upon learning of the existence of such data. 

6. INFORMATION WE GET FROM OTHER SOURCES 

From time to time, we may need to obtain information from third parties about you. This will only apply where it is necessary to provide our services and as permitted by law. 

We may receive personal data relating to your identity and contact data from data partners and data from any third parties who are permitted by law or have your permission to share your personal data with us, such as via social media. 

7. HOW WE USE YOUR DATA 

UK data protection law requires us to have a “legal basis” for processing personal data. The legal bases we rely on are: 

Detailed list of the reasons for us using personal data.

Use of personal data Type of data Legal basis Online registration: 

(a) Identity 

(b) Contact 

Use of personal data Type of data Legal basis Application processing:

(a) Identity 

(b) Contact 

Performance of a contract or to take steps to enter into a contract to provide, manage and personalise our services to you, respond to communications 

(a) Identity (b) Contact 

Where necessary for the perform of our agreement or to take steps to enter into an agreement:

It is in our legitimate interests to make sure that our customer accounts are well-managed, and to provide a high standard of service 

To process payments 

(a) Identity 

(b) Contact 

(c) Financial 

(d) Transaction 

Performance of a contract 

Necessary to comply with a legal obligation to administer and improve the website 

(e) Technical (h) Usage 

It is in our legitimate interests to develop and improve our products and services, so that we can continue to provide products and services that our customers want to use, and to make sure we continue to be competitive to send email notifications which have been specifically requested 

(a) Identity (b) Contact 

It is in our legitimate interests to give you information about our products and services that you may be interested in to send marketing communications, where expressly agreed eg newsletters; 

(a) Identity (b) Contact (i) Marketing and 

Communications 

In the case of electronic marketing when we have your consent to do so. 

To provide third parties with statistical information about our users 

(e) Technical (h) Usage 

It is in our legitimate interests to better understand how our customers use our products and what changes we could make to improve them to ask for feedback or review 

(a) Identity 

(b) Contact 

It is in our legitimate interests to better understand how our customers use our products and what changes we could make to improve them to deal with enquiries and complaints 

(a) Identity (b) Contact (e) Technical (h) Usage 

It is in our legitimate interests to make sure that our customer accounts are well-managed, so that our customers are provided with a high standard of service to recover debt and exercise other rights we have under any agreement with you, as well as to protect ourselves against harm to our rights and interests in property 

(a) Identity (b) Contact (c) Financial (d) Transaction 

Where necessary to perform a contract or to take steps to enter into an agreement with you where the law requires this.

It is in our legitimate interests to ensure that we can recover debts owed to us, as well as making sure our assets are protected.

Users contacting this website and/or its owner do so at their own discretion and provide any such personal data requested at their own risk. Your personal data is kept private and stored securely until a time it is no longer required or has no use. 

Our legitimate interests 

When we use our legitimate interests as the legal basis for processing your personal data, we will consider and balance any potential impact on you and your rights before we process your personal data. We will only then proceed where we believe our interests are not overridden by the impact on you. Our legitimate interests include the management of our business operations. 

8. SHARING INFORMATION 

Disclosure 

We don’t share, sell, or distribute your data to third parties, except as contractually agreed with you or as explained in this Privacy Policy. We may disclose your personal data if we are required to do so by law, in connection with any legal proceedings, and in order to establish, exercise or defend our legal rights, or if otherwise legally permitted. 

We may need to use your information and personal data to contact your GP or emergency contact. This will be in exceptional circumstances such as when we have a duty of care or are required by law to provide information about you. 

If you are a staff member of a Company purchasing our services we will not share your data or any other information with that Company except with your permission (extending service provision etc). 

We may disclose personal data to a third party to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change such as this happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Policy. 

Counselling Notes and use of Zoom/Google meet 

Therapists may keep brief handwritten notes of the counselling sessions for their own records and must ensure that measures are taken to protect the confidentiality of clients at all times. Notes should not identify any individual client. 

Records must comply with the Regulations and Codes of Practice determined by a counsellor’s accreditation body. Therapists are also required to adhere to the Self Space Documentation Management Policy. 

No recordings are kept of sessions conducted by Zoom or Google Meet, but you are recommended to refer to the Privacy Policy or the relevant platform provider for details of how this third party use data. 

See Privacy | Zoom

Google Meet security and privacy for users – Google Meet Help

Google Drives

Wounded Healer use google docs and other cloud based google products for day to day document storage.  Google are a third party Data Processor.

Please refer to their policy at Privacy Policy – Privacy & Terms – Google

Marketing 

We may carry out direct marketing by email, phone, text or post. We will ask for your consent to receiving marketing communications (including newsletters) when you register on the website or contact us and you have the option not to give consent and to withdraw consent given at any time. You may withdraw your consent for us to contact you by email to info@woundedhealer.co.uk. We may continue to contact you for non-marketing purposes if there is another lawful basis to do so. Non-personally identifiable information may be provided to other third parties for marketing, advertising or other uses. 

External links 

Users of the website are advised to adopt a policy of caution before clicking on any external web links. Clicking an external link will take the user away from our website. Once you leave our website or are redirected to a third-party website, plug-in or application, you are no longer governed by this Privacy Policy or our website’s terms and conditions. We cannot guarantee or verify the contents of any externally linked website and users click on external links at their own risk. Self Space and its owners cannot be held liable for any damages, or the consequences of visiting any external links. 

Social media platforms 

Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are subject to our terms and conditions as well as the privacy policies held with each social media platform respectively. 

Users are advised to use social media platforms wisely and communicate and/or engage with them with due care and caution in regard to their own privacy and personal details. This website nor its owners will not ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email. Wounded Healer uses social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised that before using such social sharing buttons, that they do so at their own discretion, and should consider that the social media platform may track and save requests to share a web page, through the users’ social media platform account. 

Payment processing 

In order to process your account and take payment for your Wounded Healer sessions we will take your Debit/Credit card details. We are monitored and require annual compliance with the PCI (Payment Card Industry), which means we must follow their technical and operational standards to ensure that credit card data provided by cardholders is safeguarded and that all payment transactions are carried out securely. 

Reviews/Evaluation of our service 

We may ask for a review of our services and these may be published on our website or social media, if you give your consent for us to do so. You may withdraw your consent at any time. 

9. DATA RETENTION 

We keep your personal data to provide services to you as contracted and also as required to meet legal, statutory and regulatory obligations. The need to hold information is regularly reviewed and data will be disposed of when no longer required. 

10. DATA SECURITY 

We have put in place appropriate security measures to prevent personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, personal data is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential. We take appropriate steps to ensure a safe processing of personal data, however, we cannot guarantee the security of data transmitted through our website or by email. Any such transmission is at the sender’s own risk. 

11. DATA STORAGE

Our website is hosted by Digitalocean.com. Personal data collected from our website contact forms are stored in a secure database. 

12. RIGHTS OF DATA SUBJECTS 

Wounded Healer recognises a data subject’s rights and will uphold these in accordance with data protection law. In relation to certain rights, we may ask you for information to confirm your identity and, where applicable, to help us to search for your personal information. Except in rare cases, we will respond to you within one month from either (i) the date that we have confirmed your 

identity or (ii) where we do not need to do this because we already have this information, from the date we received your request. 

You should note that the following rights may not be absolute and may not be upheld where there is valid justification not to do so. 

Subject access requests 

You have the right to ask for a copy of the information that we hold about you by email to info@woundedhealer.co.uk. We may not provide you with a copy of your personal information if this concerns other individuals or we have another lawful reason to withhold that information. In limited circumstances a fee may apply. 

Right to rectification 

Data subjects have the right to request that personal data is amended or changed if it is inaccurate or incorrect. We act on any such request without delay. 

Right to erasure 

Data subjects have the right to ask us to delete personal data from our systems without giving any reason and at any time. We act on any such request without delay. 

Right to restrict processing 

Data subjects have the right to rectification or erasure of personal data in the following circumstances: 

Personal data is not accurate; – The processing of data is unlawful; – Data is required to exercise legal rights or defend legal claims; – Data is unlawful, although there may be lawful grounds for processing, which 

override this right. 

Right to data portability 

Data subjects have the right to obtain and request the transfer of their data to a different service provider. 

Right to object 

Data subjects have the right to object to the processing of personal data at any time based on their circumstances. This includes objecting to profiling unless it is in the ‘public interest’ or exercised lawfully by an official authority. We will only process personal data upon a legal basis. 

Right not to be subject to decisions based on automated processing 

Wounded Healer do not use any automated processing that results in any automated decision based on personal data. 

Exercising your rights 

If you wish to invoke any of your rights as a data subject, you should contact us by email to info@woundedhealer.co.uk.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. We may refuse to comply with your request in limited circumstances. 

13. DATA BREACHES 

We will report any unlawful breach of data as required by the GDPR within 72 hours of the breach occurring, if it is considered that data within our control including the control of our data processors, has been compromised, or potentially compromised. If the breach is classified as ‘high risk’ we will notify all data subjects concerned using an appropriate means of communication. We will report relevant breaches as required to the ICO, see below. 

14. CHANGES TO OUR PRIVACY POLICY 

We reserve the right to change this Privacy Policy at any time and users are recommended to review it frequently. Changes will take effect immediately upon their posting on the website. You will be deemed to have accepted any changes to the terms of the privacy policy on your next visit of the website following the amendment. 

15. REPORTING COMPLAINTS 

If you wish to raise a concern about the use of your personal data, you can contact us by email to info@woundedhealer.co.uk. Alternatively, you can formally raise a concern or complaint to the Information Commissioner’s Office (ICO), the UK regulatory authority for data protection: Address: Information Commissioner’s Office 

Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Telephone: 0303 123 1113 Website: https://ico.org.uk/concerns 

Logo footer

Web Design by TEWC