Confidentiality and Information Sharing Policy

At The Therapy Company, we prioritise the security and confidentiality of the information you provide during your assessment, including personal details and medical history. This information is handled with the utmost care, in compliance with the relevant legal and ethical guidelines.

However, our clinicians are also bound by their professional registration bodies’ codes of conduct, which govern patient confidentiality. This means that, in certain exceptional and rare situations where there is a risk of serious harm, clinicians may be required by law to disclose specific information to protect the safety of the individual or others.

If you are prescribed medication as part of your treatment, we may need to share relevant details with other healthcare professionals, such as your GP, in line with the General Medical Council (GMC) guidelines for safe prescribing. This is to ensure continuity of care and safety during your treatment.

Rest assured, all information shared will be done with your best interests in mind and handled in the most confidential manner possible.

Patient Privacy Policy

This policy explains how we collect, use and protect personal and sensitive health information when providing clinical services. It applies to all patients engaging with The Therapy Company (UK) Ltd.

1. Data Controller

The Therapy Company (UK) Ltd is the data controller responsible for the personal and special category (health) data processed in connection with our clinical services.

2. Types of Data We Process

We may process the following information as part of your care:

  • Identity and contact details.
  • Medical history and presenting concerns.
  • Clinical notes and correspondence.
  • Assessment results and diagnostic information.
  • Medication information.
  • Referral details from GPs or other professionals.
  • Safeguarding or risk-related information where relevant.

This data is required to safely deliver clinical assessment and treatment.

3. How We Collect Patient Data

We obtain patient information through:

  • Direct communication with you.
  • Consultations and clinical assessments.
  • Referrals from GPs or other healthcare professionals.
  • Onward care coordination where appropriate.
  • Documentation generated by clinicians during treatment.

4. Purposes for Processing

We process your information for:

  • Delivering clinical assessment, treatment and ongoing care.
  • Maintaining accurate clinical records.
  • Coordinating your care with authorised professionals.
  • Meeting legal, regulatory and safeguarding obligations.
  • Service quality monitoring and administrative functions.

We do not use patient data for marketing or non-clinical purposes.

5. Lawful Bases for Processing

Personal Data (Article 6 UK GDPR)

We process personal data under:

  • Legitimate Interests – to provide safe and effective clinical services.
  • Contract – where you engage our services directly.
  • Special Category Data (Article 9 UK GDPR)

We process health information under:

  • Article 9(2)(h) – healthcare provision and management.

Where consent is required for specific processing activities, we will obtain this separately.

6. Data Sharing

We may share information with:

  • Clinicians working with or on behalf of The Therapy Company.
  • Your GP or relevant healthcare providers where clinically appropriate.
  • Pharmacies when medication is prescribed.
  • Safeguarding authorities where we have legal obligations.
  • Regulators or law enforcement when required by law.

We will never share patient information for advertising, marketing or unrelated commercial use.

7. Data Retention

We retain clinical records in line with professional standards and UK healthcare record retention requirements.

When information is no longer required, it is securely deleted or archived.

8. How We Protect Your Information

We use appropriate technical and organisational measures to safeguard patient data.

Access is strictly limited to authorised personnel involved in your care or service administration.

9. Your Rights Under UK GDPR

You have the right to:

  • Request access to your personal data.
  • Request correction of inaccurate information.
  • Request restriction or erasure where appropriate.
  • Request transfer of your data to another provider.
  • Object to certain forms of processing.

Some rights may be limited in clinical contexts (for example, where deletion of records conflicts with legal or clinical obligations).

To make a request, contact: consultants@thetherapycompany.co.uk

10. Complaints

If you have concerns about how your data has been handled, you may:

Scroll to Top