Your data is precious so it’s important that that you read this policy and make sure you fully understand it, before you access or use any of our services. This privacy policy is to let you know how we may collect and use personal information, and the rights and choices available to you regarding this information. 

​

Our privacy policy has been reviewed and set out to underline the new rights for individuals within new data protection laws. The General Data Protection Regulation (GDPR) has been in force since 25th May 2018. This change has occurred to help protect and unify the way that an individual’s data is managed through the European Union (EU).

​

Dr Meg Arroll is the Data Controller.

​

Why we process your personal data:

​

The data that we gather from you that is kept on the Dr Meg Arroll website is necessary for us to be able to make appointments for you, to contact you regarding appointment times and dates or to discuss your consultancy or therapeutic sessions. There is a privacy policy on the website for your information on how this data is processed. It is in our legitimate interest to process this data.

​

The data that we gather from you from your initial assessment session and subsequent sessions is necessary in order to formulate your personalised programme. We also keep minimal records of subsequent sessions so that we can track progress, correspondence related to your programme and the outcomes our work. It is our legal obligation to process this data.

​

We may use cookies where appropriate to gather information about your computer in order to assist us in improving our website.  

​

You can adjust the settings on your computer to decline any cookies if you wish. This can be done within the 'settings' section of your computer. For more information please read the advice at AboutCookies.org.

​

If you sign up for our blog, which is administered through Wix.com, we will store some of your information, including your email address, IP address and certain information about the links you click on within the emails we send you.

​

The type of data we may collect is listed below:

​

• Name and contact details

• Name, address, telephone number, e-mail

• Demographic data

• Date of birth, sex, marital status, occupation

• Special category data 

• Height and weight, BMI, previous psychological interventions and diet plans, past medical history, nature of work and hobbies, family medical history, method of payment for sessions. Related correspondence from associated health professionals.

​

Who we share your information with:

 

We may share your information, when relevant, with GPs and specialists or when referring on to other specialists for further psychological or medical assessment/investigation. This will only be done with your informed signed consent.

​

Requests for reports on your psychological interventions from third parties will be supplied only when appropriate and only with your informed signed consent.

​

From time-to-time we engage in academic research. We will contact you and provide you with an information sheet and written consent form, to be completed if you’d like to take part. These projects are approved by academic institutions and details of their data protection policies will be provided. 

​

How long we keep your personal information:

​

We keep your data securely for eight years after you have completed your sessions. This complies with our legal obligations.

​

How to get a copy of your data:

​

You can apply in writing to Dr Meg Arroll, 26 Jevington Way, London, SE12 9NE.

We shall endeavour to supply a copy of your data within one month.

​

What to do if your information is incorrect:

​

You can amend the information that we hold at any time, but we may ask for proof of identity to ensure that we are communicating with you. If you request details of your data that we hold and you wish for your data to be changed at the same time, you will receive both the old and the new information in our response.

​

What to do if you wish us to stop using your personal information:

​

You have the right under GDPR to ask us to delete, remove or to stop using your data as long as there is no legal reason for us to keep it. There may be a legitimate reason or legal obligation as to why we cannot remove or delete some of your personal information. If this arises, it will be fully explained within our communications with you.