Privacy Policy
Privacy Policy for SpeakWell Speech and Language Therapy
Last updated: 20/10/2025
Review date: 20/10/2026
1. Who we are
Speakwell Speech and language Therapy is a private speech-and-language therapy practice, providing assessment and therapy services to individuals children in Bristol/The South-West. We are registered with the Health and Care Professions Council (HCPC), and the Royal College of Speech and Language Therapists (RCSLT).
We are the data controller for the personal data processed in connection with our services.
2. Our commitment to data protection
We are committed to protecting your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data-protection laws. We will collect, store, use and share your personal data only in a lawful, fair and transparent way.
3. What information we collect
We may collect and process the following categories of personal information:
-
Contact details (name, address, phone, email) of clients and, where relevant, parents/carers/guardians.
-
Date of birth, gender, communication/speech-and-language needs, medical history, educational background, developmental history.
-
Therapy session notes, assessment reports, therapy plans/programmes.
-
Payment, invoicing or financial details required for billing.
-
Website enquiry information (if you contact us via the site) such as name, email, phone, message.
-
Other professionals’ reports and information (with your consent) relevant to therapy (e.g., from schools, nurseries, other health professionals).
4. How we collect your information
We collect information by:
-
You submitting an enquiry via our website, email or telephone.
-
You (or parent/carer) completing intake/case-history forms.
-
Engaging in therapy sessions, assessments or consultations.
-
Receiving information from other professionals (with consent) involved in your or your child’s care.
5. Why we use your information (purpose & lawful basis)
We use your information for the following purposes:
-
To assess your speech, language and communication needs, to plan and deliver therapy services.
-
To communicate with you (e.g., appointments, sending reports/plans, advising on therapy).
-
To manage our business operations (invoicing, payments, record-keeping).
-
To comply with our professional/legal obligations (e.g., HCPC standards, audit, safeguarding).
-
To maintain and improve our service (clinical audit, anonymised data reviews).
The lawful bases we rely on include:
-
Performance of a contract (providing therapy services).
-
Legal obligation (professional/regulatory).
-
Your consent, where applicable (e.g., sharing information with other professionals).
6. How we store and secure your data
-
Clinical and administrative records are stored securely in electronic/cloud-based systems that are password-protected and encrypted.
-
Paper-based records (if any) are stored in locked cabinets in secure premises.
-
When data is taken out (e.g., to school visits) it is carried in secure, locked form (or kept on encrypted devices) and returned/secured as soon as possible.
-
We retain records in line with professional guidance: for example, for children until they reach age 25 (or older if still receiving therapy), and for adults for a minimum period of [insert years] years. At the end of the retention period, records are securely destroyed (shredded or permanently deleted).
-
We ensure regular reviews of our data-security procedures, staff training and updates to our systems.
7. Who we share your data with
We will only share your personal information with third parties in the following circumstances:
-
With other professionals involved in your care (e.g., school staff, other therapists, medical professionals), but only with your (or parent/carer) consent.
-
When required by law (e.g., safeguarding, court order).
-
With our business advisors (e.g., accountants) under strict confidentiality and data-processing arrangements.
We do not sell your personal data, nor do we share your data for marketing purposes to third parties without your consent.
8. Your rights
Under UK GDPR you have rights including:
-
The right to access the personal data we hold about you (data subject access request).
-
The right to ask us to correct inaccurate or incomplete data.
-
The right to request erasure of your data (in certain circumstances).
-
The right to restrict or object to processing (in certain circumstances).
-
The right to withdraw consent where we are relying on it.
-
The right to data portability (in certain automated contexts).
If you wish to exercise any of these rights, please contact us at [email/phone]. We will respond within one calendar month (or as required by law).
If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
10. Cookies and website
Our website uses cookies to improve user experience. You can disable cookies via your browser settings, though this may affect functionality.
Links on our website may take you to external sites; we are not responsible for their privacy practices.
11. Changes to our policy
We may update this Privacy Policy occasionally. We will publish the updated version on our website and indicate the “last updated” date above.
12. Contact us
If you have any questions about this policy or how we use your personal data, please use the contact form section of this website.
