THE DATA PROTECTION ACT
We are currently registed as required under the Data Protection legislation (registration reference code ZA003111). We will follow the principles set out in that legislation at all times while processing your personal information. Your personal information is anything that can be used to personally identify you. We will process your personal data carefully and lawfully, and will only share them within our organisation and among our employees and appointed representatives, except where we have your explicit consent.
We will do our best to protect your personal data using appropriate technical and organisational steps, and will store it on our database within a secure network. All client files are held as encrypted files and are backed up to an external hard-drive which is securely stored. All computing devices holding these encrypted files are also password protected and have firewalls installed to ensure further levels of security. However, we cannot absolutely guarantee the security of your personal data.
We only use Hushmail email accounts, which are HIPAA accredited for use with online therapy. All email therapy responses will be sent via a Hushmail email account and will be encrypted.
We will use your personal information to process payments via PayPal, and may disclose it to them. Apart from this, we will not disclose or sell your personal information to any third party without your permission. We will not transfer your data outside the European Union. We may use aggregate anonymised data and share it with third parties. However, if we reasonably believe that we are required by law to disclose your personal information to a third party, whether in compliance with any applicable law or regulation or by court order or in connection with legal proceedings, we may do so. Purpose and Duration We will use your personal data to:
• send and respond to emails from you
• manage our provision of our services to you
• send information to you about our services
• maintain our records and databases
• carry out statistical analysis
• monitor and evaluate website use
• for administration, accounting, marketing and archival purposes.