Privacy Policy

The Confidential Room is the private practice of Andrea Pavarini.

Andrea Pavarini trades as The Confidential Room and, for the purposes of UK data protection law, is the data controller of the personal information described in this Privacy Policy.

Contact:
Andrea Pavarini
The Confidential Room
10 Harley Street
London W1G 9PF
Email: privacy@theconfidentialroom.com
Telephone: 07838 587435
Website: www.theconfidentialroom.com
ICO registration number: ZC134821

1. Introduction

This Privacy Policy explains how personal information is collected, used, stored and protected when you visit this website, get in touch, or enquire about psychotherapy services.

Privacy, discretion and trust matter deeply, especially when someone is considering therapy. Personal information is handled with care and in accordance with UK data protection law.

2. What information may be collected

The information collected may include:

• your name
• your email address
• your telephone number, if you choose to provide it
• any information you include in a contact form, email, or message
• limited technical information required for the operation and security of the website
• payment-related information where necessary for receipt or payment administration

If you choose to include sensitive personal information in an enquiry, this may include information relating to mental health, emotional wellbeing, relationships, sexuality, or other deeply personal matters.

3. How information is collected

Information may be collected:

• when you complete a contact form on this website
• when you email or otherwise contact the practice
• when you enquire about therapy or request an initial consultation
• through strictly necessary website technologies that support the operation and security of the site

4. How information is used

Personal information may be used to:

• respond to your enquiry
• arrange an initial consultation
• consider whether the practice is an appropriate fit for your needs
• provide information about services
• manage appointments and related administration
• maintain the security and functionality of the website
• comply with legal, regulatory, tax, insurance, or professional obligations
• establish, exercise, or defend legal claims where necessary

5. Lawful bases for processing

Depending on the circumstances, processing may rely on one or more of the following lawful bases:

• legitimate interests, where necessary to respond to enquiries, administer the practice, and operate the website securely and effectively
• steps taken at your request before entering into a contract, where you contact the practice to explore therapy
• contract, where processing is necessary in order to provide agreed services
• legal obligation, where information must be retained or disclosed in order to comply with applicable legal, tax, regulatory, or professional requirements

Where special category data is involved, it will only be processed where there is an appropriate lawful basis and an additional condition for processing under UK data protection law.

6. Special category data

If you contact the practice about psychotherapy, you may choose to provide sensitive personal information. This may include information about mental health, emotional wellbeing, sexuality, sexual life, relationships, or other highly personal matters.

This information is treated with particular care and processed only where it is lawful and necessary to do so.

Please do not include more sensitive detail than is necessary in an initial enquiry.

7. Sharing information

Personal information is not sold.

Information may be shared, where necessary and appropriate, with trusted service providers who support the operation of the website or the administration of the practice, such as secure email providers, website hosting providers, accountants, legal or professional advisers, insurers, or payment and receipt administrators.

Payments and receipts may be administered through AP Concierge House LTD. AP Concierge House LTD does not act as the controller of the therapy practice under this Privacy Policy. Its role is limited to payment and receipt administration where relevant.

Information may also be disclosed where there is a legal obligation to do so, or where disclosure is necessary to protect someone’s vital interests, prevent serious harm, or establish, exercise, or defend legal claims.

8. International transfers

Some service providers used for website hosting, email, or administration may store or process information outside the UK.

Where this happens, reasonable steps are taken to ensure that appropriate safeguards are in place so that personal information remains protected in accordance with UK data protection law.

9. Retention

If you make contact but do not proceed into therapy, enquiry information will usually be retained for up to 12 months, unless there is a legitimate reason for a different period in a particular case.

If you become a client, personal information and any therapy-related records will be handled in accordance with the separate Client Privacy Notice and will usually be retained for 7 years after the end of therapy, unless there is a legitimate reason for a different period in a particular case.

Website-related technical and security data is retained only for as long as reasonably necessary for those purposes.

10. Security

Appropriate technical and organisational measures are taken to help protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no method of transmitting or storing information online is completely secure. While reasonable steps are taken to protect personal information, absolute security cannot be guaranteed.

11. Your rights

Under UK data protection law, you may have rights including:

• the right to be informed
• the right of access
• the right to rectification
• the right to erasure in certain circumstances
• the right to restrict processing in certain circumstances
• the right to object in certain circumstances
• the right to data portability in certain circumstances
• rights in relation to automated decision-making, where applicable

These rights are not absolute and may depend on the lawful basis relied on.

12. Complaints

If you have any concerns about how personal information is used, the practice would welcome the opportunity to address them first.

You also have the right to complain to the Information Commissioner’s Office (ICO).

13. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time. Any revised version will be posted on this page with the updated date.

14. Contact

If you have any questions about this Privacy Policy or about how personal information is handled, please contact:

Andrea Pavarini
The Confidential Room
10 Harley Street
London W1G 9PF
Email: privacy@theconfidentialroom.com
Telephone: 07838 587435
Website: www.theconfidentialroom.com
ICO registration number: ZC134821