Privacy Policy
Bright Path Therapy is committed to protecting your privacy and handling personal data in accordance with UK GDPR and the Data Protection Act 2018.
This page explains what information is collected, why it is collected, and how it is used.
Who We Are
Bright Path Therapy is an independent CBT-informed therapy service supporting children and young people.
Data Controller: Bright Path Therapy
Email: hello@brightpaththerapy.net
What Information Is Collected
When you make an enquiry or access therapy services, the following information may be collected:
Parent/carer name
Child or young person’s name
Contact details (email, phone number, address)
Relevant background information shared in enquiry or assessment
Session notes
Website usage data (via cookies)
Only information necessary to provide safe and appropriate therapeutic support is collected.
How Your Information Is Used
Your information is used to:
Respond to enquiries
Arrange consultations and sessions
Provide therapeutic support
Maintain clinical records
Meet legal, safeguarding and professional requirements
Your information is not sold or shared for marketing purposes.
Legal Basis for Processing
Personal data is processed under:
Legitimate interest (to respond to enquiries and provide therapy)
Contract (where therapy sessions are agreed)
Legal obligation (where safeguarding or legal requirements apply)
Special category health information is processed for the provision of healthcare services.
Confidentiality
Information shared in therapy is confidential.
However, confidentiality may be broken if:
There is a risk of harm to a child or others
There is a legal obligation to disclose information
Where possible, this would be discussed with you first.
Data Storage and Security
Digital records are stored securely using password-protected systems.
Paper records (if used) are stored in locked storage.
Access to information is restricted.
Reasonable steps are taken to protect your data.
Data Retention
Clinical records are typically retained in line with professional and insurance guidance.
After the retention period, records are securely destroyed.
You may request further details about the retention schedule at any time.
Your Rights
Under UK GDPR, you have the right to:
Request access to your personal data
Request correction of inaccurate data
Request erasure in certain circumstances
Restrict or object to processing
Lodge a complaint with the Information Commissioner’s Office (ICO)
Cookies
This website may use cookies to improve functionality and analyse website traffic.
You can adjust your cookie preferences through your browser settings.
Contact
If you have any questions about how your information is handled, please contact:
hello@brightpaththerapy.net
www.brightpaththerapy.net