# Privacy notice: outline (adapt before use)

> This is general information, not legal advice. Adapt it to your practice and professional body, and get advice if unsure.
> The ICO has a free privacy notice generator, including a health and social care version: https://ico.org.uk/create-your-own-privacy-notice

## Who I am
- Your name or business name, contact details, and your ICO registration number if you have one.

## What information I collect
- For example: contact details, session notes, information about health (special category data), payment details.

## Why I use it, and my lawful basis
- Each purpose (providing therapy, taking payment, meeting legal or professional duties) and the lawful basis you rely on.
- For health information, the condition you rely on for special category data. See the ICO's guidance on special category data.

## Who I share it with
- For example: your supervisor (anonymised), your insurer, your accountant, IT or notes providers, and anyone you're legally required to tell.

## Where it's stored and how it's protected
- Paper and digital storage, security measures, and any transfers outside the UK.

## How long I keep it
- Your retention period for each type of record, and why.

## Your rights
- Access, correction, deletion, restriction, objection and portability, and how to ask.

## Complaints
- How to raise a concern with you, and the right to complain to the ICO: https://ico.org.uk/make-a-complaint/

## Changes to this notice
- The date of this version.