Peak Therapy Ltd

Website Privacy Policy

Document status: Draft for review before publication

Last updated:15 July 2026

Prepared for publication on the Peak Therapy Ltd website

32 Dovedale Crescent, Buxton, Derbyshire, SK17 9BH
Email: info.peakspeechtherapy@gmail.com
Telephone: 07867800025

Confidential business document for website publication and client transparency

This privacy policy explains how Peak Therapy Ltd collects, uses, stores and protects personal information provided through its website and in connection with therapy enquiries and services. It covers client and website visitor information, including contact details, enquiry information, health and wellbeing information, appointment records, payment information and technical website data.

The policy sets out the purposes for which information may be used, the lawful bases relied on under UK data protection law, how confidentiality is maintained, when information may be shared, how long records may be kept, and the rights individuals have in relation to their personal information.

Before publication, Peak Therapy Ltd should review and complete all placeholders, confirm retention periods, confirm whether services are offered to children and young people, and ensure the policy reflects the website’s actual cookies, booking tools, payment providers and communication systems.

​

Summary................................................................................................... 1

Table of Contents........................................................................................ 2

Privacy Policy.............................................................................................. 3

1. Who we are............................................................................................. 3

2. Scope of this policy.................................................................................. 3

3. Personal information we collect................................................................ 4

4. Special category data............................................................................... 4

5. How we collect personal information......................................................... 4

6. How and why we use your information........................................................ 5

7. Confidentiality and when we may share information.................................... 6

8. Cookies and website analytics.................................................................. 6

9. How long we keep your information............................................................ 6

10. How we protect your information............................................................. 7

11. International transfers............................................................................ 7

12. Your rights............................................................................................. 7

13. Children and young people..................................................................... 8

14. Third-party websites and tools................................................................. 8

15. Changes to this policy............................................................................ 8

16. Contact us and complaints..................................................................... 8

​

Peak Therapy Ltd is responsible for looking after the personal information you provide through our website and in connection with enquiries about our therapy services. In data protection law, we are the “controller” of your personal information.

Please replace the placeholders below with Peak Therapy Ltd’s current details before publishing this policy.

· Business name: Peak Therapy Ltd

· Registered office: [insert registered office address]

· Company number: [insert company number]

· Email: [insert privacy contact email]

· Telephone: [insert telephone number]

· Website: [insert website address]

This privacy policy explains how we collect, use, store and share personal information when you visit our website, contact us, submit an enquiry, book an appointment, receive therapy services from us, or otherwise communicate with us.

This policy is intended for website visitors, prospective clients, clients, referrers and other people who contact Peak Therapy Ltd. It should be read alongside any client agreement, consent form, clinical privacy information or terms of service we provide.

We may collect and use the following types of personal information, depending on how you interact with us:

· Identity and contact details, such as your name, address, email address, telephone number and emergency contact details.

· Enquiry information, such as the reason you contacted us, preferred appointment times, therapy interests and any message you send through our website.

· Health and wellbeing information, such as information about your mental health, physical health, symptoms, medical history, medication, risk information, accessibility needs and therapy goals.

· Appointment and service information, such as booking details, attendance records, session notes, clinical correspondence and communications with you.

· Payment and billing information, such as invoices, payment status and transaction references. We do not normally store full payment card details unless clearly stated at the point of payment.

· Technical website information, such as IP address, browser type, device information, pages visited, referral source and cookie preferences.

· Marketing preferences, such as whether you have opted in to receive updates from us and whether you have unsubscribed.

Therapy services often involve information about health, wellbeing and related personal circumstances. This may include “special category data”, which receives extra protection under UK data protection law. We only process this type of information where it is necessary, proportionate and supported by an appropriate lawful basis and special category condition.

We may use special category data to assess whether our services are suitable, provide therapy, keep appropriate clinical records, support safeguarding, manage risk, comply with professional and legal obligations, and respond to requests from you or relevant authorities where required by law.

We collect personal information directly from you when you complete a website form, email us, call us, book an appointment, attend a session, complete an assessment or provide information during therapy. We may also receive information from third parties where appropriate, such as healthcare professionals, insurers, employers, family members, emergency contacts, safeguarding bodies or other referrers.

Purpose

Examples of use

Likely lawful basis

Responding to   enquiries

Replying to messages,   arranging initial calls and providing information about services.

Legitimate interests   or taking steps before entering into a contract.

Providing therapy services

Assessment,   treatment planning, session delivery, clinical notes and service   administration.

Contract,   legitimate interests and, for health information, provision of health or   social care or explicit consent where appropriate.

Managing bookings   and payments

Scheduling   appointments, sending reminders, issuing invoices and recording payments.

Contract, legitimate   interests and legal obligation.

Safeguarding and risk management

Taking   appropriate action where there is a serious risk of harm, abuse, neglect or a   legal duty to disclose information.

Vital   interests, legal obligation, legitimate interests and substantial public   interest where applicable.

Legal, regulatory   and professional compliance

Maintaining records,   responding to complaints, cooperating with regulators and meeting tax or   accounting duties.

Legal obligation and   legitimate interests.

Website operation and improvement

Keeping the   website secure, understanding how visitors use the website and improving   content.

Legitimate   interests and consent for non-essential cookies where required.

Marketing   communications

Sending newsletters or   updates where you have asked to receive them.

Consent or legitimate   interests, depending on the circumstances and applicable marketing rules.

We treat client information as confidential. We will only share personal information where there is a clear reason to do so, where you have agreed, where it is necessary to provide our services, or where we are required or permitted by law.

We may share information with:

· Clinical supervisors, professional advisers or insurers, where this supports safe and ethical practice.

· Healthcare professionals, referrers or other organisations involved in your care, where appropriate and usually with your agreement.

· Emergency services, safeguarding bodies, local authorities or other relevant organisations where there is a serious risk of harm or a legal duty to disclose information.

· Service providers who support our business, such as website hosting, email, appointment booking, payment processing, accounting, secure storage or IT support providers.

· Regulators, courts, law enforcement agencies, HMRC or other authorities where required by law.

Where we use service providers, we expect them to protect personal information and only use it for the services they provide to us.

Our website may use cookies or similar technologies to make the website work, remember your preferences, improve performance and understand how visitors use the site. Essential cookies are used because they are necessary for the website to function. Non-essential cookies, such as analytics or marketing cookies, will only be used where required consent has been obtained.

You can manage cookies through your browser settings and, where available, through our cookie banner or preference centre. Please add a separate cookie notice if the website uses analytics, embedded content, advertising pixels or third-party booking tools.

We keep personal information only for as long as necessary for the purposes described in this policy, including to provide services, meet legal and professional obligations, resolve disputes and maintain appropriate records.

Typical retention periods should be confirmed by Peak Therapy Ltd and may include:

· Enquiry information: [insert period, for example 6–12 months if no therapy is provided].

· Client therapy records: [insert period, based on professional, legal and insurance requirements].

· Financial and accounting records: normally at least 6 years where required for tax and accounting purposes.

· Marketing consent records: for as long as we send marketing and for a reasonable period afterwards to evidence consent or preferences.

· Website analytics information: [insert period based on the tools used].

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These may include access controls, passwords, secure storage, encryption where appropriate, staff confidentiality obligations, supplier checks and procedures for responding to data incidents.

No website, email system or online service can be guaranteed to be completely secure. Please take care when sending sensitive information online and contact us if you would prefer to discuss alternative communication methods.

We aim to store and process personal information in the UK or another country with appropriate data protection safeguards. If any of our service providers process personal information outside the UK, we will take steps intended to ensure that appropriate safeguards are in place, such as adequacy regulations or approved contractual protections.

Under UK data protection law, you may have rights to:

· Access a copy of the personal information we hold about you.

· Ask us to correct inaccurate or incomplete information.

· Ask us to delete information in certain circumstances.

· Ask us to restrict how we use your information in certain circumstances.

· Object to certain uses of your information.

· Ask for information to be transferred to you or another organisation in certain circumstances.

· Withdraw consent where we rely on consent, without affecting the lawfulness of earlier processing.

· Complain to the Information Commissioner’s Office if you are unhappy with how your information has been handled.

These rights are not absolute and may be subject to legal, professional or safeguarding restrictions. To make a request, please contact us using the details in section 16.

If we provide services to children or young people, we will handle their information with particular care and provide age-appropriate information where required. We may also need to communicate with parents, guardians, schools, healthcare professionals or safeguarding organisations, depending on the circumstances and legal requirements.

If Peak Therapy Ltd does not provide services to children or young people, replace this section with a statement confirming that the services are intended for adults only.

Our website may link to third-party websites or use third-party tools, such as booking platforms, payment providers, video consultation services, maps, analytics tools or embedded content. Those organisations may process your personal information under their own privacy policies. Please review their privacy information before providing personal information to them.

We may update this privacy policy from time to time to reflect changes in our services, website, legal requirements or data protection practices. The latest version will be published on our website with the “Last updated” date shown at the top.

If you have any questions about this privacy policy or how we handle your personal information, please contact:

· Peak Therapy Ltd

· Email: info.peakspeechtherapy@gmail.com

· Telephone: 07867800025

· Address: 32 Dovedale Crescent, Buxton, Derbyshire. SK179BH

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection. You can contact the ICO at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113, or through the ICO website.