{"id":3,"date":"2020-03-04T08:36:35","date_gmt":"2020-03-04T08:36:35","guid":{"rendered":"http:\/\/apf-wellness.azurewebsites.net\/?page_id=3"},"modified":"2026-09-01T13:02:11","modified_gmt":"2026-09-01T12:02:11","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.apf-wellness.co.uk\/index.php\/legal-stuff\/privacy-policy\/","title":{"rendered":"APF Wellness \u2013 Privacy Policy"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>1. Introduction and Who We Are<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Welcome to APF Wellness. APF Wellness is a brand operated by <strong>APF Business Ltd<\/strong>. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, APF Business Ltd is the &#8220;Data Controller&#8221; of your personal information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We are committed to protecting the privacy, confidentiality, and security of our clients seeking online counselling and psychotherapy services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2. What Personal Data We Collect and Our Lawful Basis<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Due to the sensitive nature of psychotherapy, we collect standard personal data as well as highly sensitive health data (known legally as &#8220;Special Category Data&#8221;).<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Standard Personal Data:<\/strong>\u00a0This includes your name, contact details, billing information, and web enquiries.\n<ul class=\"wp-block-list\">\n<li><strong>Lawful Basis:<\/strong>\u00a0We process this data to fulfil our contract with you for bookings and sessions (Article 6(1)(b) UK GDPR) and where necessary to respond to your enquiries (Article 6(1)(f) &#8211; Legitimate Interests).<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Special Category Data (Mental Health):<\/strong>\u00a0This includes information concerning your mental and physical health, intake forms, and Clinical Notes.\n<ul class=\"wp-block-list\">\n<li><strong>Lawful Basis:<\/strong>\u00a0We process this highly sensitive data on the basis of your\u00a0<strong>explicit consent<\/strong>\u00a0(Article 9(2)(a) UK GDPR) and for the provision of healthcare services (Article 9(2)(h) UK GDPR and DPA 2018 Schedule 1).<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3. Limits of Confidentiality and Safeguarding<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Counselling is a strictly confidential space. However, in accordance with professional ethical guidelines (e.g., BACP, UKCP) and UK law, there are limits to this confidentiality. We may be legally or ethically required to share your data with appropriate third parties (such as your GP, emergency services, or local safeguarding authorities) without your consent if:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>We believe you are at serious risk of harm to yourself or others;<\/li>\n\n\n\n<li>You share information regarding the abuse or neglect of a child or vulnerable adult (Safeguarding);<\/li>\n\n\n\n<li>We are compelled to do so by a UK court of law.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Wherever clinically appropriate and safe, we will attempt to discuss this with you before breaching confidentiality.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>4. Third-Party Processors and International Transfers<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To deliver our professional services, we use a suite of secure, industry-standard third-party processors. We ensure that all providers are GDPR-compliant and, where data is transferred outside the UK\/EEA (for example, to US-based servers), we ensure appropriate safeguards\u2014such as Standard Contractual Clauses (SCCs) or reliance on UK Adequacy Decisions\u2014are strictly in place.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We engage with specific categories of processors to manage different aspects of your care:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Clinical Management:<\/strong> We use specialised <strong>Practice Management Systems<\/strong> to securely store your intake forms, appointment history, and Clinical Notes.<\/li>\n\n\n\n<li><strong>Telehealth and Communication:<\/strong> We utilise secure <strong>Video Conferencing platforms<\/strong> for all therapy sessions, and professional <strong>Email\/Productivity suites<\/strong> for administrative correspondence.<\/li>\n\n\n\n<li><strong>Financial Transactions:<\/strong> We use encrypted <strong>Payment Gateways<\/strong> to process session fees. Please note that APF Wellness does not store your full credit card or payment credentials in our systems; the provider handles these entirely.<\/li>\n\n\n\n<li><strong>Administrative Records:<\/strong> We use professional <strong>Accounting and Invoicing software<\/strong> to manage our business records and tax obligations.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">For a detailed list of the specific platforms and sub-processors used in our technical infrastructure, you may request our <strong>Data Processing Register<\/strong> from our Data Protection Officer (DPO).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>5. Digital Engagement, Analytics and Advertising<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We maintain a professional presence on social media platforms, such as <strong>Facebook<\/strong> and <strong>LinkedIn<\/strong>, for community engagement and information sharing. To ensure our website remains user-friendly and effective, we utilise certain digital insight tools:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Website Analytics:<\/strong> We use industry-standard <strong>web analytics and heatmapping tools<\/strong> to monitor website traffic and user behaviour. These tools help us understand how visitors navigate our site so we can improve our service delivery. Where possible, this data is processed in an anonymised format.<\/li>\n\n\n\n<li><strong>Digital Advertising:<\/strong> We utilise <strong>search and social media advertising platforms<\/strong> to reach potential clients. These platforms may use cookies or tracking pixels to measure the effectiveness of our outreach campaigns.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Note on Privacy and Tracking:<\/strong> We hold a strict policy against &#8220;retargeting&#8221; or &#8220;surveillance&#8221; advertising. We do not use pixels to track your specific mental health interests or browsing history across the web. In compliance with <strong>PECR (Privacy and Electronic Communications Regulations)<\/strong>, any non-essential tracking or advertising cookies are strictly subject to your explicit, prior consent via our cookie banner.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>6. How Long We Keep Your Data<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Data Retention and Storage<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In line with professional psychotherapy standards, clinical governance, and our professional indemnity insurance requirements, we adhere to strict storage limitation principles. We do not retain data longer than is legally or professionally necessary.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Clinical Records:<\/strong>\u00a0Information held within our\u00a0<strong>Practice Management Systems<\/strong>\u00a0(including intake forms, session summaries, and Clinical Notes) is retained for\u00a0<strong>7 years<\/strong>\u00a0following the conclusion of your final therapy session. This period is required to meet our regulatory and legal obligations.<\/li>\n\n\n\n<li><strong>Administrative and Financial Records:<\/strong>\u00a0Data related to billing, invoicing, and transaction records (held within our\u00a0<strong>Accounting and Payment systems<\/strong>) is retained in accordance with UK tax and financial regulations.<\/li>\n\n\n\n<li><strong>Communications and Enquiries:<\/strong>\u00a0Information provided via web enquiries or email that does not result in an active clinical relationship is securely deleted after\u00a0<strong>6 months<\/strong>.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">After these mandatory retention periods expire, we permanently and securely delete all digital records and destroy any physical documentation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>7. Your Legal Rights<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Under the UK GDPR, you have the right to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Access<\/strong>\u00a0your data (requesting a copy of the personal data we hold about you);<\/li>\n\n\n\n<li><strong>Rectify<\/strong>\u00a0inaccuracies in your data;<\/li>\n\n\n\n<li><strong>Erase<\/strong>\u00a0your data (noting that this does not include clinical data we are legally or professionally obliged to keep for administrative, legal, or security purposes);<\/li>\n\n\n\n<li><strong>Restrict or Object<\/strong>\u00a0to the processing of your data; and<\/li>\n\n\n\n<li><strong>Request Data Portability<\/strong>.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>8. Contact Information and Complaints<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you have any questions or wish to exercise your legal rights, please contact our Data Protection Officer:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Data Protection Officer:<\/strong> Beata Anna Faff<br><strong>Email:<\/strong> office@apf-wellness.co.uk<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You also have the right to lodge a complaint with the <strong>Information Commissioner&#8217;s Office (ICO)<\/strong> (www.ico.org.uk) if you believe we are mishandling your data.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>1. Introduction and Who We Are Welcome to APF Wellness. APF Wellness is a brand operated by APF Business Ltd. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, APF Business Ltd is the &#8220;Data Controller&#8221; of your personal information. We [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":60,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","foodica_hide_title":false,"wpzoom_is_featured":false,"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.apf-wellness.co.uk\/index.php\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.apf-wellness.co.uk\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.apf-wellness.co.uk\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.apf-wellness.co.uk\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.apf-wellness.co.uk\/index.php\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":6,"href":"https:\/\/www.apf-wellness.co.uk\/index.php\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":940,"href":"https:\/\/www.apf-wellness.co.uk\/index.php\/wp-json\/wp\/v2\/pages\/3\/revisions\/940"}],"up":[{"embeddable":true,"href":"https:\/\/www.apf-wellness.co.uk\/index.php\/wp-json\/wp\/v2\/pages\/60"}],"wp:attachment":[{"href":"https:\/\/www.apf-wellness.co.uk\/index.php\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}