Penny Foley Therapy has a legal duty to explain how we use any personal information
we collect about you as a patient. We will maintain records about your & the treatment you receive
in electronic & paper format. We will collect non-sensitive information such as name, address.
We require this contractually in order to provide our service in accordance with article 6(1)(b) of
the GDPR-EU legislation. In accordance with article 9(2)(h) of the GDPR-EU legislation, we may
collect relevant sensitive data to enable us to deliver effective therapeutic care. We may also hold
information from another practitioner who writes to us on your behalf. Your data is collected for
the purpose of providing direct patient care. We may disclose this information if required by law,
if you give consent or if justified in the public interest. We may share information about you with
your GP &/or psychiatrist if we believe this would be beneficial to your health. We are committed
to maintaining confidentiality. Your data is protected, stored securely & retained for 5 years after
treatment has ended. You have the right to access the information we hold about you. If you identify
any inaccuracies, you have a right to have them corrected. You have the right to have your personal
data restricted or deleted if you feel it is being used improperly, unless it must be retained by law.