Privacy Policy
Last updated: 15 October 2025
Who we are: Elliot Rose Therapy (“we”, “us”). Contact: elliot@elliotrosetherapy.com.
What this policy covers: Information you share via the enquiry form or email. Clinical records are governed by a separate therapy agreement provided before treatment begins.
What we collect: Your name, email address, programme interest, and any details you provide in your message. Please avoid including sensitive diagnoses or information; we can cover those privately.
How we use your data: To respond to enquiries, organise consultations, and deliver requested services (lawful bases: contract and legitimate interests). We do not send marketing emails without consent and do not sell or share data for advertising.
Storage & sharing: Messages are delivered to an email inbox hosted by IONOS (EU/UK infrastructure). Website hosting is also provided by IONOS. If you engage in therapy, session notes are stored securely in line with professional guidance and are never shared without your consent unless legally required.
Retention: Enquiry emails are kept for up to 12 months, unless ongoing correspondence or legal obligations require longer. Clinical records, if therapy commences, are retained for seven years as advised by professional bodies.
Your rights (UK GDPR): You can request access to, correction of, or deletion of your personal data. You may also restrict processing, request data portability, or object to processing. Contact us at the email above to exercise these rights.
Security: We use password-protected accounts and two-factor authentication where available. While we take reasonable steps to protect your data, no online transmission is completely secure—please consider this when sending sensitive information.
Complaints: If you’re unhappy with how we handle your data, please contact us directly. You can also lodge a complaint with the UK Information Commissioner’s Office (ICO).