Introduction

Dr. Nga Ting Lau is committed to safeguarding your privacy and protecting your personal information. Any personal data shared—whether through verbal communication, written correspondence, electronic forms, or via the website—will be handled in strict accordance with the principles outlined in the Data Protection Act 1998 and the General Data Protection Regulation (GDPR). This data will be processed solely for the purposes for which consent has been provided and to deliver the requested services.

This privacy notice explains what to expect regarding the handling of your personal information. If you have any questions or concerns about this policy, please contact us at drlau.cp@gmail.com.

Should you have concerns about how we use your personal data, you have the right to file a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection (www.ico.org.uk). However, we would appreciate the opportunity to address your concerns directly, so please contact us at drlau.cp@gmail.com in the first instance.

What information we collect, use, and why

The following information may be collected to ensure safe and effective collaboration, as well as to facilitate efficient communication, appointment reminders, and invoicing:

Identity Data: Includes name, title and date of birth.
Contact Data: Includes country, billing address, email address, telephone numbers, and emergency contact information.
Parent/Carer and Child Data: Includes parent/carer contact details and the child’s date of birth, collected for the purpose of allocating an appropriate parenting programme.
Payment Data: Includes details about payments, such as bank account and payment card details.
Health information: Includes data related to your physical or mental health and may include address and telephone number of your GP and names of other services involved in your care.

In addition to the above, during initial contact, subsequent therapy, and courses, further personal data will inevitably be collected to provide the services you have requested.

Special Categories of Personal Data

No Special Categories of Personal Data are collected through the website. This includes details about race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, health information, and genetic or biometric data. Additionally, no information about criminal convictions or offences is collected.

You may share Special Categories of Personal Data during therapy sessions or courses. Video recording may also occur, but only with explicit consent. While participants are encouraged to keep any confidential information shared by others during the course private, there is no guarantee that this will always be the case. Therefore, it is important to carefully consider sharing sensitive information.

You may disclose Special Categories of Personal Data during therapy sessions, which may be retained in session notes. This personal data is used exclusively to provide the therapy services requested.

Where we get personal information from

Personal information is collected in the following ways: a. Data provided directly by you; b. Data received from other sources; and c. Data collected automatically.

Data provided directly by you

Personal data may be collected in various ways, including: a. When you contact us through the website, by telephone, email, electronic forms (including all inquiry and application forms), or by any other means; b. When you use our services; In each case, data is collected in accordance with this Privacy Policy.

Data received from third parties

Personal data may be received from the following third parties: a. Referrers.

Data collected automatically

As you interact with our website, Technical Data about your device, browsing actions, patterns, location data, and usage data are automatically collected. This personal data is collected using cookies and other similar technologies. For more details on our Cookie Policy, please visit https://wordpress.org/about/privacy/cookies/.

How long we keep information

Information will be retained for as long as services are being received. Data will only be held for as long as necessary to fulfill the purposes for which it was collected, including legal, reporting, and accounting requirements. For individuals under the age of 18, personal data will be retained until their 25th birthday. For all other individuals, therapy data will be held for 7 years following the date of last contact with the services. After these periods, all data, whether in paper or electronic form, will be securely destroyed or erased.

If you are referred by England Dailo, you will be asked to sign a consent form for Information Sharing with Anglio Dailo Ltd., our joint controller, registered with the ICO. Any shared information will be treated with the utmost confidentiality by both data controllers.

For all other clients, your information will not be shared with any organizations or individuals, except in the following circumstances:

a) Consent – Information may be shared with other professionals at your request or with your consent.

b) Serious Harm – Information may be shared with relevant authorities if there is a significant risk of self-harm or harm to others.

c) Compliance with Law – Information may be shared when required by law, regulations, or other applicable legal obligations.

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.

Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.

Your right to erasure – You have the right to ask us to delete your personal information. You can read more about this right here.

Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. You can read more about this right here.

Your right to object to processing – You have the right to object to the processing of your personal data. You can read more about this right here.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.

Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Policy updated on 16/09/2024