Data protection policy
Last reviewed: march 12th 2026
Effective Date: 2nd November 2023
Next review date due: 12th march 2027
1: Introduction
I am committed to protecting and respecting your privacy. This Data Protection and Privacy Policy explains how I collect, use, store, and safeguard your personal data in line with the General Data Protection Regulation (GDPR) and other relevant data protection laws.
2: data controller
I am the data controller for any personal information you provide. You can contact me at:
Jamie Louise Hollis
adhdslt@outlook.com or use the contact form here.
3: data collection
To provide you with speech and language therapy services, I collect personal data, which may include:
- Personal identification information (e.g., name, contact details)
- Health and medical history relevant to your therapy
- Session notes and records related to your therapy.
Digital records are stored using secure password protected systems and encrypted devices where appropriate. Access to client records is restricted to the practitioner only.
4: purpose and use of data
I use your personal data for the following purposes:
- To deliver and manage your speech and language therapy
- To communicate with you about appointments, treatment plans, and follow-ups
- To keep accurate and up-to-date records related to your therapy
- To meet legal and regulatory obligations.
Legal Basis for Processing:
Personal data is processed under the lawful bases of providing healthcare services, fulfilling contractual obligations, and complying with legal and professional requirements. Health data is processed as special category data under Article 9(2)(h) of the UK GDPR for the provision of healthcare and treatment.
5: data retention
I retain therapy records for a minimum of 6 years after the end of therapy, or until a child reaches the age of 25, whichever is longer, in line with professional record keeping guidance.
6: your rights
Under GDPR, you have several rights concerning your personal data:
- Right to Access: You can request a copy of the personal data I hold about you.
- Right to Rectification: You can ask me to correct any inaccurate or incomplete data.
- Right to Erasure: You can request the deletion of your personal data if it is no longer necessary for the purposes for which it was collected.
- Right to Restrict Processing: You can request that I limit the processing of your data under certain conditions.
- Right to Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You can object to the processing of your data in specific circumstances, including for direct marketing.
- Requests for access to personal data (Subject Access Requests) will normally be responded to within one calendar month, in accordance with UK GDPR requirements.
To exercise any of these rights, please contact me using the details provided above.
7: data security
I take appropriate measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Secure storage of physical and digital records
- Use of encryption and secure communications
- Regular reviews and updates of my security practices.
8: data sharing and disclosure
I do not share your personal data with third parties unless it is necessary to provide my services or required by law. Information may be shared with other professionals involved in your care, such as GPs, schools, or other healthcare providers, where this is necessary for your therapy and with your consent, unless safeguarding concerns require information to be shared without consent.
Data Breach:
If a personal data breach occurs that may pose a risk to individuals’ rights or freedoms, the breach will be assessed and reported to the Information Commissioner’s Office where required under UK GDPR regulations.
9: changes to this policy
I may update this Data Protection and Privacy Policy from time to time to reflect changes in my practices or legal requirements. Any updates will be posted on my website, and I encourage you to review the policy periodically.
10: complaints
If you believe I have not complied with your data protection rights, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK. You are also free to read my complaints policy and I encourage you to voice your concerns with me firstly.
11: Contact
If you contact me through the website contact form, the information you provide will be used solely for responding to your enquiry and will not be shared with third parties.
If you have any questions or concerns about this policy or how I handle your personal data, please reach out to me at:
Jamie Louise Hollis
Signed: Jamie Louise Hollis, ADHD SLT.
Job Title: Speech and Language Therapist, Speech and Language Therapy