Privacy Policy

Bridge 2 Recovery Ltd is committed to protecting your privacy and handling personal information in a clear, respectful, and lawful way.

This Privacy Policy explains how personal information is collected, used, stored, and protected when you visit this website, make an enquiry, or use psychological services provided by Bridge 2 Recovery Ltd.

• Data Controller: Bridge 2 Recovery Ltd
• Contact email: Dr.TPL@proton.me
• ICO registration number: ZC117956

This policy explains:

• what personal information may be collected
• how that information is used
• when information may be shared
• how information is stored and protected
• how long information is kept
• your rights under UK data protection law

The ICO states that privacy information should clearly explain who is collecting personal data, what is collected, how it is used, and the rights available to individuals.

Information you provide through the website

If you make contact through this website, by email, or by telephone, personal information may include:

• your name
• your email address
• your telephone number
• any information you choose to include in your message

Please do not include more sensitive information than is necessary when making an initial enquiry.

Information collected if you become a client

If you go on to use therapy, assessment, consultation, or related services, personal information may include:

• your name, address, telephone number, email address, and date of birth
• your GP details
• emergency contact details
• mental health information
• physical health information
• medication details
• personal history discussed in sessions
• information relevant to therapy, assessment, or ongoing care

In some cases, information about important people in your life, such as a partner, family member, or trusted contact, may also be recorded where this is relevant to your care.

For serving police officers referred through Occupational Health, a collar or service number may also be collected for administrative or billing purposes.

Technical information

When you visit this website, limited technical information may be collected automatically by your browser or device, such as:

• IP address
• browser type
• device information
• pages visited
• date and time of access

Personal information may be used to:

• respond to enquiries
• provide therapy, psychological assessment, consultation, or related services
• maintain accurate clinical records
• communicate about appointments or services
• meet professional, ethical, and legal responsibilities
• protect you or others from serious harm where necessary
• manage and improve the website where appropriate

Personal information is processed in accordance with UK GDPR and the Data Protection Act 2018. Depending on the circumstances, the lawful basis for processing may include:

• your consent
• taking steps at your request before entering into a contract
• fulfilling a contract for services
• compliance with legal obligations
• protecting vital interests
• legitimate interests in running and administering the practice appropriately

Where health information or other special category data is processed in connection with therapy or psychological services, this is handled in accordance with UK data protection law and relevant professional obligations.

Information shared in therapy is treated as confidential.

To support safe and effective practice, clinical work may be discussed in professional supervision. Where this happens, identifying details are anonymised and are not shared unnecessarily.

Personal information is not routinely shared with others unless there is a lawful and appropriate reason for doing so. Information may be shared where necessary:

• with your consent
• for professional or administrative purposes connected with your care
• to comply with legal obligations
• to respond to a court order
• where there are safeguarding concerns involving a child or vulnerable adult
• where there is a serious risk of harm to you or to another person

Where possible and appropriate, this would usually be discussed with you first. However, this may not always be possible if doing so would increase risk or prevent protective action from being taken.

This website may use cookies or similar technologies to support its operation and performance.

The ICO states that website visitors should be told when cookies are used and what they do. If non-essential cookies or analytics tools are used on this website, you should be informed and, where required, asked for your consent.

Personal information is stored securely and access is limited to what is necessary for professional practice and care.

Digital client data stored locally is protected with full-disk encryption using FileVault with XTS-AES-128 encryption and a 256-bit key. Backups are stored on an encrypted external hard drive using APFS (Encrypted), which also uses XTS-AES-128 encryption with a 256-bit key. The drive is kept in a locked fire-safe when not in use.

Paper notes and forms are scanned and uploaded to the relevant record, and paper copies are shredded using a cross-cut high-security shredder.

Personal information is retained only for as long as necessary to meet professional, legal, and ethical responsibilities.

Client records are ordinarily retained for 6 years after the end of contact. Records relating to minors are retained until the young person reaches the age of 25.

Some limited information may need to be retained for longer where necessary to meet legal, regulatory, or administrative obligations.

Under UK GDPR, you may have the right to:

• be informed about how your information is used
• request access to your personal data
• request correction of inaccurate information
• request erasure in certain circumstances
• request restriction of processing in certain circumstances
• object to certain types of processing
• complain to the Information Commissioner's Office

Some of these rights may be limited where legal exemptions apply, including in connection with safeguarding, clinical records, or the protection of others from harm.

This website may contain links to other websites. If you follow a link to another site, please note that it will have its own privacy policy and Bridge 2 Recovery Ltd is not responsible for how that site handles your information.

This Privacy Policy may be updated from time to time to reflect legal, professional, or website changes. The most recent version will always be the version published on this website.

If you have any questions about this Privacy Policy or how your personal information is handled, please make contact using the details below:

Bridge 2 Recovery Ltd
Email: Dr.TPL@proton.me

If you have concerns about how your information has been handled, you are encouraged to raise this directly in the first instance.

If you remain dissatisfied, you have the right to make a complaint to the Information Commissioner's Office:

Information Commissioner's Office
https://ico.org.uk/
ICO registration number: ZC117956