Privacy Policy 

Data Controller
Hendri Cawood

GDPR Legal Basis - Unscripted-Minds

1. Lawful Bases for Processing

Under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, I must have a lawful basis for processing your personal data. The lawful bases I rely on for providing psychotherapy services are:

• Contract: I process your personal data as necessary to fulfil my contractual obligations to you. This includes using your information to: 
  • Provide therapy sessions.
  • Manage appointments and scheduling.
  • Process payments for services.
  • Maintain essential records related to our work together.
• Legitimate Interests: I also process your data based on my legitimate interests in running my practice effectively and providing you with the best possible service. This includes: 
  • Sending you appointment reminders.
  • Contacting you regarding changes to appointments or practice policies.
  • Business administration (e.g., maintaining accounts).
  • Seeking supervision for my clinical work (ensuring your identifying information is kept confidential).
• Consent: In some specific situations, I may rely on your explicit consent to process your data. I will seek your consent for: 
  • Any use of your data outside of providing therapy (if applicable and unusual).
  • This will be clearly explained when seeking consent.

2. Special Category Data

The information you provide during therapy sessions concerning your health and well-being is classified as 'special category data' under the GDPR. I process this special category data under the lawful bases of:

• Necessity for the provision of health or social care or treatment: I process your health data because it is necessary to provide you with psychotherapy services and to ensure your well-being. This includes: 
  • Keeping records of our sessions to inform my therapeutic approach.
  • Assessing your needs and progress.
  • Ensuring I am working ethically and effectively.
• Explicit Consent: In addition to 'Necessity...', I also rely on your explicit consent to process this data, which you provide when agreeing to engage in therapy and acknowledging this privacy policy. You have the right to withdraw this consent at any time, but please be aware that this may affect my ability to continue providing therapy.