Legal

Privacy Policy

This policy explains what personal data The Inner Workshop collects, how it is used, and how it is kept safe. This document also serves as the privacy statement sent directly to clients.

Data Controller: Sarah Cox, trading as The Inner Workshop

Email: hello@theinnerworkshop.co.uk

Phone: 07803 127263

This is to inform you what data I am collecting from you and what I intend to do with it.

GDPR Compliance

I abide by the General Data Protection Regulations (GDPR) and am a registered member of the Information Commissioner's Office (ICO). For more information, visit ico.org.uk.

Professional Indemnity Insurance

Sarah Cox holds professional indemnity insurance through Balens Specialist Insurance Brokers — a leading provider of insurance for therapists and healthcare professionals in the UK. For more information visit balens.co.uk.

What Data Do I Keep and Why?

Name and age
Basic information that helps me get to know you.
Address, email address and phone number
Used to contact you regarding your sessions. I will mainly use the method you first contacted me on, but if I cannot reach you I will try a different method.
Next of kin / medical professional's details
If I was concerned that you were at risk, I may need to contact your next of kin or medical professional. I will let you know when and if I am going to do this.
Session notes
I keep brief notes of our session(s). These are stored in a folder in a lockable filing cabinet in my therapy room.

Will I Share Your Data?

It is very unlikely that I will share your data. I will not sell it on or use it for unethical reasons.

I may be required to share it in the following limited circumstances:

  • If my notes are subpoenaed by a court
  • If you, or anyone you tell me about, is at harm or risk of harm — in which case I may need to pass information on to appropriate services
  • During clinical supervision — however, I use only your first name in any such discussions

How Will I Store Your Data?

Your data is stored as a hard copy in a locked filing cabinet. Once our work together is complete, I transfer the data — using your initials only — to my password-protected computer.

Your phone number(s) may be kept in my mobile phone using your first name and last initial only. Only I will access your information.

How Long Will I Store Your Data?

I will keep your details and session notes for the period required by my insurer — currently 7 years from the end of our work together.

After this time, I will securely destroy any document containing your personal information and delete your phone number from my mobile phone.

Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data I hold about you
  • Request correction of any inaccurate information
  • Request deletion of your data (subject to legal and insurance obligations)
  • Object to or restrict how your data is processed

To exercise any of these rights, please contact me at hello@theinnerworkshop.co.uk.

If you have any questions about this privacy policy, please get in touch:

hello@theinnerworkshop.co.uk  ·  07803 127263