I am Harriet Gleeson and this privacy policy relates to my website: https://www.harrietgleesontherapy.co.uk.

I am both the data controller and processor registered with the Information Commissioner's Office (ICO).

This privacy policy explains how I comply with GDPR, DPA and PECR regulations (ie what I do with the information you give me about you and why I do this).

Comments
When you leave comments on my website, it collects the data shown in the comments form, and also your IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

This website is hosted by Squarespace. Squarespace collects personal data when you visit this website including: information about your browser, network and device; web pages you visited prior to coming to this website and your IP address. This information may also include details about your use of this website, including: clicks, internal links, pages visited, scrolling, searches and timestamps. Squarespace needs the data to run this website, and to protect and improve it's platform and services. Squarespace analyses the data in a de-personalised form.

Contact Forms
When you contact me via the contact form on my website, no data is stored on the website. Instead the information is emailed to me at harrietgleeson.therapy@gmail.com

If you use this form, you will be consenting to me having your name, email address and any information you provide in your message. If you do not become a client, this information is deleted from my emails within one calendar month after our last correspondence. If you would like me to delete this sooner please let me know.

If you do become a client, this information may be used to form part of our contract together and will be stored in accordance with GDPR guidelines.

Email Enquiries
I use Gmail when resonding to website enquiries, both from the contact form on my webite and direct emails. Gmail encrypts messages in transit using Transport Layer Security (TLS).

TLS protection means that emails cannot be read by third parties in transit. If your email provider does not use TLS, the information you include in your email or our correspondence, may not be secure.

Google servers are based in the US, therefore your email address and IP address may go outside the EEA.

Gmail (as part of Google) is covered by the US Privacy Shield, which is a level of approved security to pass information from UK to the US.

Cookies
This website uses cookies and similar technologies which are small files or pieces of text that download to a device when a visitor accesses a website or app. Squarespace uses some functional and required cookies to securely serve this website to you. Some analytic and performace cookies are also used only when you acknowledge the cookie banner. Analysic cookies are used to view site traffic, activity and other data. For further information of the cookies that Squarespace use please see their cookie policy.

If you leave a comment on my website you may opt-in to saving your name email address and website in cookies. These are for your convenience so that you do not need to fill in your details again when you leave another comment. These cookies will last for one year.

Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.) Embedded content from other websites behaves in the exact same way as if the visitor had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics
Squarespace and Google Analytics are used to measure website traffic. This is anonymised. The information collected includes your IP address and approximate location, pages visited, number of site visits and the type of device you are using (desktop, tablet or mobile).

Google's use and ability to share information collected via Google Analytics about your visits to this website is restricted by the Google Analytics Terms of Use and the Google Privacy Policy.

I will never share your data with anyone unless I am legally abliged, I have safeguarding concerns or you have provided your consent for me to do so.

If you leave a comment, the comment and it's metadata are retained indefinately. This is so I can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

Electronically held data is held on a password protected laptop and a smartphone protected by both a password and biometric security.
Data is deleted after it is no longer required and details of timescales are available elsewhere in this privacy policy.

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at the email address below if you wish to make a request

If you have any concerns regarding how your data is used please email harrietgleeson.therapy@gmail.com

Alternatively, you can make a complaint to the ICO if you are unhappy with how I have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk