Privacy notice

This privacy notice tells you what to expect us to do with your personal information.

Contact details

What information we collect, use, and why

Lawful bases and data protection rights

Where we get personal information from

How long we keep information

Who we share information with

How to complain

Contact details

Email: aleksandra.quintana@gmail.com

What Data Do I Collect?

Depending on how you interact with me, I may collect the following information:

Name and contact information (e.g., email address, phone number)
Relevant health or personal history shared via contact forms or during therapy sessions
Appointment details and session notes
Payment or invoicing details, if applicable

How I Use Your Data

I collect your data to:

Respond to enquiries or booking requests
Provide therapeutic services
Maintain secure client records
Send occasional updates or reminders (only if you’ve opted in)

Lawful Basis for Processing

I process personal data based on one or more of the following:

Consent (e.g. when you submit a contact form)
Contract (to provide agreed therapeutic services)
Legal obligation (for record-keeping, where applicable)
Vital interests (e.g. if there is a risk of serious harm)

How Your Data Is Stored

Your information is stored securely electronically (with password protection and encryption). Only I (Aleksandra Quintana) have access to this data. I retain client records for 7 years following the end of our work together, as per professional and insurance requirements, after which they will be securely deleted or shredded.

Third Parties

I will never sell or share your data for marketing purposes. Your information may only be shared if required by law or if there is a serious risk to your safety or the safety of others.

Where we get personal information from

Directly from you

Other health and care providers

Duty of confidentiality

We are subject to a common law duty of confidentiality. However, there are circumstances where we will share relevant health and care information. These are where:

you’ve provided us with your consent (we have taken it as implied to provide you with care, or you have given it explicitly for other uses);
we have a legal requirement (including court orders) to collect, share or use the data;
on a case-by-case basis, the public interest to collect, share and use the data overrides the public interest served by protecting the duty of confidentiality (for example sharing information with the police to support the detection or prevention of serious crime);
If in England or Wales – the requirements of The Health Service (Control of Patient Information) Regulations 2002 are satisfied; or
If in Scotland – we have the authority to share provided by the Chief Medical Officer for Scotland, the Chief Executive of NHS Scotland, the Public Benefit and Privacy Panel for Health and Social Care or other similar governance and scrutiny process.

Your Rights

You have the right to:

Request a copy of the data I hold about you
Request correction or deletion of your personal data
Withdraw consent at any time (where applicable)
Raise a complaint with the Information Commissioner’s Office (ICO) if you’re unhappy with how your data is handled