Privacy Policy

​​

 

1. Information We Collect

 

We may collect the following types of personal information before and during our work together:

 

- Personal Identification Information about your family or young person such as Name, address, email address, phone number, date of birth, and other identifying information.

- Health Information: Medical history, diagnoses, treatment plans, behavioural assessments, progress reports, and other health-related information necessary for providing our services.

- Payment Information: Billing details and other financial information required to process payments for our services.

- Communication Records: Emails, phone calls, or other communications with you regarding your services or inquiries.

- Log Data: Information about your interactions with our website or digital platforms, including IP address, browser type, and other usage data.

 

2. How We Use Your Information

 

We use the personal information we collect for the following purposes:

​

- Service Provision: To assess, plan, and deliver early intervention services to clients.

- Communication: To communicate with you regarding appointments, service updates, billing, and other relevant information.

- Billing and Payment: To process payments for services and manage billing records.

- Compliance: To comply with legal and regulatory requirements, including maintaining records for audit purposes.

- Improvement of Services: To evaluate and improve our services and operations, including using de-identified information to analyse our service.

 

​

3. Disclosure of Your Information

 

We do not sell, trade, or rent your personal information to third parties. The only time we may need to disclose your information is in the following circumstances:

​

- With Your Consent: When you provide explicit consent to share your information with external services such as school or other agencies involved with your family.

- Service Providers: To trusted third-party service providers who assist us in delivering services, such as billing companies or IT support, under strict confidentiality agreements. The third party services that we use during our services will include Microsoft Office 365, WriteUpp Practice Management Services and Microsoft Teams. WriteUpp software is GDPR compliant and is ISO27001 certified, which means that their systems and processes comply with this globally recognised standard of data safety.

- Legal Obligations: If required by law, regulation, or court order, we may disclose your personal information to appropriate authorities.

- Safety: To protect the safety of our clients, staff, or others, we may disclose information as necessary if there is a significant risk towards them or others.

 

4. Data Security

 

We implement appropriate physical, technical, and administrative measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

 

Our website was created on Wix. Websites built on Wix offer around-the-clock-monitoring and use the strongest encryption standard commercially available to safeguard businesses and their clients online. Supported by anti-fraud protection, sites are also compliant with the highest Payment Card Industry Data Standards. Therefore, businesses running on the platform receive enterprise-grade security managed by experts. Wix’s privacy policy can be found here: https://www.wix.com/about/privacy.

 

Cookies are also collected through my website for Wix Analytics. Cookies are automatically enabled to support web developers to help users to navigate their website efficiently and perform certain functions. Cookies can be disabled on our website using the banner at the bottom of the page. To find out more information about Wix and how cookies are used please go to the following website: https://support.wix.com/en/article/cookies-and-your-wix-site

 

5. Your Rights and Choices

 

You have the right to:

- Access: Request a copy of the personal information we hold about you.

- Correction: Request that we correct any inaccuracies in your personal information.

- Deletion: Request the deletion of your personal information, subject to certain legal and contractual restrictions.

- Data Portability: Request a copy of your personal information in a structured, commonly used, and machine-readable format.

 

To exercise these rights, please contact us using the contact details provided below.

 

6. Retention of Information

 

We retain personal information for seven years as required by the BACB Professional and Ethics Compliance Code unless a longer retention period is required for any other reason. Any information gathered from enquiries or any free consultations that have not led to a piece of work will be deleted within three months.

 

7. Children’s Privacy

 

Our services are designed to assist children, and we are committed to protecting their privacy. We only collect personal information about children from their parents, guardians, or authorized representatives. We do not knowingly collect personal information directly from children without appropriate parental consent.

 

8. Changes to This Privacy Policy

 

This privacy policy was last updated on 29th of August 2024. We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. We will notify you of any significant changes by posting the updated Privacy Policy on our website and indicating the effective date. We encourage you to review this Privacy Policy periodically.

 

9. Contact Us

 

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

ENA Behaviour Consultancy

Alice@enabehaviourconsultancy.com