We follow UK GDPR principles for all personal data.
The guidance below outlines how we remain compliant and transparent.
Lawful basis
We process data under legitimate interest to respond to enquiries and under contract when families book sessions.
Data minimisation
We only request the information necessary to schedule services and communicate progress.
Security
Records are stored in access-controlled systems with regular review by our team leads.
Requests
For access or erasure requests, email [email protected] and we will respond within 30 days.