Privacy and Data Policy
Kinda Brilliant is dedicated to safeguarding your privacy and protecting your personal data. This privacy notice explains how we handle your data when you visit our website, request more information about our services, or become a client. Kinda Brilliant is responsible for managing the information you share with us. Charlotte Ricca serves as our Data Protection Officer (DPO). If you have any questions regarding this notice or would like to access, update, or delete your data, please reach out to her at charlotte@kindabrilliant.co.uk. Keeping your data accurate is important, so please notify us of any updates.
Personal data
Personal data refers to any information that can be used to identify an individual. We only gather data about you through direct interactions. You may provide your name and contact details when completing our online form to request more information about our services. Via our website, we collect, use, store, and manage Identity Data (such as your name) and Contact Data (such as your email address or phone number).
If you use Kinda Brilliant’s services, we will retain more detailed contact information and session notes. We have implemented security measures to prevent your personal data from being lost, misused, accessed without authorization, altered, or disclosed.
Paper-based therapy notes are stored in a locked cabinet, while digital data is kept in emails or password-protected cloud storage, accessible only by Charlotte Ricca.
In case of a suspected data breach, we have protocols in place and will inform you and the relevant authorities, if required.
When taking detailed data off-site for a session, only your first name is used to reduce the risk of external identification.
We only use your website-submitted personal data to respond to service inquiries. If you do not engage our services, your details are deleted after six months. If you do, your files will be retained for seven years following the completion of therapy, as recommended by the British Psychological Society.
Aggregated data
The analytics of the website store usage data but this data is aggregated so not linked to any individual person.
Third parties
Personal and contact data will only be shared outside Kinda Brilliant with your consent, such as for a referral to a specialist or if you came through a program with which we are contracted. Client names may be shared with our accountants for auditing purposes, but they are also bound by confidentiality agreements and will not disclose this information.
Kinda Brilliant's website may contain links to third-party sites. If you click these links, third parties may collect or share your data. We do not control these sites and recommend reviewing their privacy policies when you leave our website.
Charlotte Ricca may discuss cases in supervision without using your name. In rare instances, if there is a serious risk to you (e.g., suicide) or others (e.g., child protection), she may need to contact your next of kin or relevant professionals (e.g., your GP) without your consent. However, she will attempt to inform you beforehand if possible.
Marketing
Kinda Brilliant does not currently use email or postal marketing so your contact data would not be used for marketing purposes.
Deleting data
In some circumstances you can ask us to delete your data. You will not have to pay a fee to access your personal data or to exercise any of your other rights with regards to your data.
You have the right to:
Request access to your personal data. This allows you to obtain a copy of the personal information we have on file and ensure that we are processing it lawfully.
Request a correction of your personal data. If any of the information we have about you is incomplete or incorrect, you can ask us to update it, though we may need to confirm the accuracy of the new information you provide.
Request the deletion of your personal data. This gives you the right to ask us to remove or delete your information if there's no valid reason for us to keep processing it.