Privacy policy.

Last updated: June 11, 2025

This Privacy Notice explains how Jennifer Benson Speech Therapy (“we,” “us,” or “our”) collects, uses, shares, and protects personal data about you in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller and (where applicable) UK Representative

Controller: Jennifer Benson Speech Therapy 20 Nightingale Close Barton upon Humber, DN18 6GA

If we process special-category (health) data at scale or engage in systematic monitoring, we have appointed a Data Protection Officer (DPO):

Data Protection Officer: Jennifer Benson (DPO) jbensonspeechtherapy@outlook.com

Otherwise, contact our main office as above.

Personal Data We Collect & Source

We collect the following categories of personal data:

• Identity & contact: name, address, email, phone (you; publicly available records)

• Service records: assessment notes, appointment history (you; our clinicians)

• Communications: emails, call logs, chat transcripts (you)

• Marketing & preferences: consents, opt‑in status, feedback (you; surveys)

• Technical & online: IP address, cookies, analytics tracking (online activity)

Purposes & Lawful Bases

We rely on these lawful bases (UK GDPR Art. 6) for processing:

• Performance of contract: provision of speech therapy services (to fulfil agreed treatment plans)

• Legal obligation: billing, invoicing, financial compliance, handling legal claims or complaints

• Legitimate interests: service improvement, website operation/security, quality assurance (LIA documented)

• Consent: direct marketing such as newsletters and event notices (opt‑in; withdraw at any time)

Legitimate Interests Assessment (LIA)

Where we rely on legitimate interests, we have documented:

  1. Purpose: service improvement and site security.

  2. Necessity: data minimisation and limited retention.

  3. Balancing: no undue impact on your rights; pseudonymisation where possible.

Data Retention

We retain personal data only as long as necessary:

• Clinical records: 8 years after last contact (health data)

• Financial & billing data: 7 years (HMRC requirement)

• Marketing consents: until withdrawn plus 1 year

• Website analytics logs: 12 months

• Complaint records: 6 years

After these periods, records are securely deleted or anonymised.

International Transfers

If we transfer data outside the UK (e.g., to cloud providers), we ensure safeguards such as Standard Contractual Clauses, UK adequacy decisions, or binding corporate rules.

Data Sharing

We share personal data:

• With contracted service providers (IT/hosting, professional advisors, banking)

• With regulators, courts, or law enforcement when legally required

• With potential business buyers or in corporate reorganisations (with confidentiality safeguards)

All recipients follow our instructions and maintain appropriate security measures.

Your Rights

Under the UK GDPR, you have the right to:

• Access your data and receive a copy

• Rectify inaccurate or incomplete data

• Erase data (“right to be forgotten”) when no legal basis exists

• Restrict processing in certain circumstances

• Object to processing based on legitimate interests or direct marketing

• Portability of data processed by automated means under consent or contract

• Withdraw consent at any time (without affecting prior processing)

• Lodge a complaint with the ICO (see section 12)

To exercise your rights, email jbensonspeechtherapy@outlook.com with:

  • Your name and contact details

  • Details of your request and any supporting information

We aim to respond within one calendar month.

Cookies & Similar Technologies

Our website uses cookies and analytics to improve performance and user experience. You can manage your cookie preferences via our cookie banner or browser settings. See our Cookie Policy for details.

Data Security & Breach Notification

We implement technical and organisational measures such as encryption, access controls, and staff training. In the event of a personal data breach:

  1. We assess its risk to your rights.

  2. We notify the ICO within 72 hours if required.

  3. We inform you without undue delay if there is a high risk to your rights.

Changes to This Notice

We review this notice annually or when laws change. The top date shows the last update. Material changes will be communicated by email or a website banner.

Complaints & Contact

Data Protection Contact: jbensonspeechtherapy@outlook.com

ICO Complaint: Information Commissioner’s Office (ICO) Wycliffe House, Water Lane Wilmslow, Cheshire, SK9 5AF Website: https://ico.org.uk/make-a-complaint/ Phone: 0303 123 1113 (local rate) or 01625 545 745