Privacy and confidentiality

Who is responsible

Jana Therapy is the data controller for personal information used to provide therapy services. Before launch, add the controller's full legal name, postal address and privacy email address here.

Information collected and why

When you book, Square may collect your name, contact details, appointment choices, payment information and other details you choose to provide. Jana Therapy uses relevant booking information to arrange and provide sessions, communicate with you, take payment and meet legal and professional record-keeping duties.

During therapy, Jana Therapy may take brief clinical notes about your experiences, relationships, wellbeing and mental or physical health where these are needed to provide safe and effective therapy.

Legal basis and sensitive information

Booking and service information is processed to take steps at your request and perform the therapy agreement, and where necessary to comply with legal obligations. Information about physical or mental health is special-category data and requires an additional condition under Article 9 of the UK GDPR.

Jana Therapy processes information about your physical or mental health under Article 9(2)(a) of the UK GDPR, based on your explicit consent. This consent is requested separately before therapy begins, identifies the health information and purposes involved, and may be withdrawn at any time. Withdrawal does not affect processing already carried out lawfully before it was withdrawn.

Confidentiality during therapy

Information shared during therapy sessions is treated as confidential. Jana Therapy will actively protect it from unauthorised access or disclosure. Identifiable session information is accessible only to your therapist and will not be shared without your consent unless there is a legally recognised reason to do so.

Where clinical supervision supports safe and ethical practice, only anonymised material that does not identify you is used.

Limited exceptions

Confidentiality is not absolute. Jana Therapy may need to disclose the minimum necessary information when required by law or a court, when safeguarding duties apply, or where there is a serious risk of harm to you or another person. Wherever it is safe and lawful to do so, the concern and proposed disclosure will be discussed with you first.

The therapy agreement provided before sessions begin must confirm the confidentiality arrangements and limits that apply to your work together.

Storage, sharing and retention

Booking data is processed by Square as a service provider and may also be held in Jana Therapy's confidential practice records. Personal information is not sold. Access is limited to people who need it for the purposes described in this notice and who are required to keep it confidential.

Information is kept only for the clinical, legal and insurance periods confirmed by Jana Therapy, then securely deleted. Before launch, state those periods and explain any international transfers, the countries involved and the safeguards used.

Your data protection rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction or transfer of your personal data. You may also object to certain processing. Where processing relies on consent, you may withdraw it at any time without affecting processing already carried out.

Your right to object: you may object to processing based on legitimate interests.

Questions and complaints

Contact Jana Therapy using the privacy contact added above if you have a question, wish to exercise a right or have a concern. You also have the right to complain to the Information Commissioner's Office (ICO).