Last Updated: 07/10/2025

At Harbour Wellbeing, your privacy and trust are central to the way we work. This Privacy Policy explains how your personal data is collected, used, and stored in line with the UK General Data Protection Regulation (UK GDPR), the British Association for Behavioural and Cognitive Psychotherapies (BABCP), and the Nursing and Midwifery Council (NMC) Code of Conduct.

 

1. Who We Are

Harbour Wellbeing

Based in Dorset, United Kingdom

Provides therapy and wellbeing services including individual therapy, group sessions, wellbeing support, retreats, online therapy, and outdoor-based interventions.

Contact: info@harbourwellbeing.com

 

2. What Information We Collect

​We collect and store personal data that may include:

• Personal identification information (name, date of birth, contact details)
   

• Health information relevant to your care (e.g., medical history, mental health concerns)
   

• Session notes (handwritten and digital)
   

• Referral details (via Google Forms)
   

• Communication records (emails, messages)
   

• Emergency contact details
   

• For minors: data of the child and consent from a parent/guardian
   

We only collect information necessary to provide safe and effective care.

 

3. How We Collect Information​​

• Directly from you: during assessment, sessions, or via email
   

• Referral forms: completed through Google Forms
   

• Online communication: email correspondence and web forms
   

​

4. How We Use Your Information

​Your data is used to:

• Provide you with safe, ethical, and effective therapy or wellbeing services
   

• Maintain accurate records in line with professional standards
   

• Manage appointments and communication
   

• Respond to queries or feedback
   

• Meet legal and regulatory obligations
   

 

5. Lawful Basis for Processing

​Under UK GDPR, the lawful bases for processing your personal data include:

• Consent – for marketing or initial contact via referral forms
   

• Contract – for providing agreed therapeutic services
   

• Legal obligation – for safeguarding, or compliance with health and professional regulations
   

• Vital interests – if there’s a serious risk of harm
   

• Legitimate interests – for efficient practice administration and service improvement
   

 

6. How We Store Your Information​

• Paper notes: kept in a locked cabinet in a secure location
   

• Electronic files: stored on a password-protected laptop
   

• Emails: stored securely via Gmail with two-factor authentication
   

• Google Forms: used for referrals; stored within a secure Google Drive account
   

• Records are kept for up to 7 years in accordance with professional guidance and legal requirements (or until the child turns 25 if under 18 at the time of treatment)
  
   

7. Sharing Your Information

Your information is confidential and will only be shared:

• With your explicit consent
   

• If required by law (e.g., court order)
   

• If there is a risk of serious harm to you or others
   

• If you or someone you care for is at risk (e.g., child protection)
   

We do not sell or share your data with third-party marketers.

 

8. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
   

• Request correction of inaccurate or incomplete data
   

• Request deletion of your data in some circumstances
   

• Object to or restrict data processing in certain cases
   

• Data portability (to receive your data in a transferable format)
   

• Withdraw consent at any time (where consent is the basis for processing)
   

To exercise any of these rights, contact us at: leanne.harbourwellbeing@gmail.com

 

9. Confidentiality for Children and Young People

Where services are provided to minors, information is handled with appropriate sensitivity. Parental or guardian consent is required for children under 13, unless assessed as Gillick competent.

 

10. Social Media and Online Presence

We use Instagram and Facebook to promote general wellbeing information and services. We do not discuss or share client-specific information on social media. Any success stories or feedback will be anonymised. 

 

12. Changes to This Policy

We may update this policy occasionally. The latest version will always be available upon request or on our website (if applicable).

 

13. Contact

If you have any questions about this policy or your data, please contact:

Leanne Grossett, Harbour Wellbeing
Email: info@harbourwellbeing.com