Oyster Intervention – Play Therapy, Telford (“we”, “our”, “us”) is committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we collect, use, store, and safeguard your personal data.

Data Controller

The data controller responsible for your personal information is:
Oyster Interventions
📍 Telford, UK
📧 contact@oysterintervention.co.uk

Information We Collect

We may collect personal data including:

• Your name, address, telephone number, and email address
• Information about your child relevant to therapy (e.g., age, school, developmental history)
• Records of communication with you (emails, phone calls, session notes)
• Payment and invoicing information

How We Use Your Data

We process your personal data to:

• Provide play therapy and emotional support services
• Arrange appointments and communicate about sessions
• Manage payments and administrative tasks
• Comply with safeguarding, legal, and regulatory requirements
• Improve and develop our services

We will never sell your personal data or share it for marketing purposes without your consent.

Legal Basis for Processing

We process your data under the following lawful bases:

• Contractual necessity – to provide the services you request
• Consent – where you have given clear permission (e.g., receiving newsletters)
• Legal obligation – to comply with safeguarding or other statutory requirements
• Legitimate interests – to manage and improve our services while respecting your rights

Data Sharing

We may share personal information:

• With professional colleagues or agencies where required for safeguarding purposes
• With legal authorities if legally obligated
  All other sharing is strictly controlled and limited to what is necessary.

Data Retention

We retain personal data only as long as necessary for the purpose it was collected or to comply with legal obligations. Typical retention periods include:

• Therapy records: retained securely for 7 years after the last session with a child
• Financial records: retained for 6 years for tax and accounting purposes

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your personal data (where legally permissible)
• Restrict or object to certain processing activities
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your rights have been breached (ico.org.uk)

To exercise your rights, contact us at:
📧 contact@oysterintervention.co.uk

Security of Your Data

We take appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse. Only authorised personnel have access to confidential information.

Cookies

Our website may use cookies to improve your experience. You can manage cookie settings via your browser.

Updates to This Policy

This policy may be updated periodically. The latest version will always be available on our website.