Privacy Policy
Language Used in This Privacy Policy
In this Privacy Policy, the terms “you” or “the user” refer to the person reading and interacting with this policy, while the terms “we,” “us,” or “our” refer to the business of Is This It?, which is operated by Miriam Gilmore, and/or any future employees, affiliates, or representatives associated with Is This It?.
​
Commitment to Confidentiality and Privacy
I understand the importance of your privacy and confidentiality. As both a therapist and coach, I adhere to data protection laws (GDPR, 2018) and the ethical guidelines set by the British Association of Counselling and Psychotherapy (BACP) here. These guidelines are designed to protect your personal information and ensure professionalism and integrity in my practice.
To provide you with the best service, I will hold your contact details and brief records of our sessions. Please find below details on how this information will be handled and protected, as well as our comprehensive Privacy Policy (including details on our Cookies and Data Policy).
​
Effective Date: 03/03/2025
​
Policy:
Is This It? (www.miriam-isthisit.com) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
1. Information We Collect
We collect the following information from our clients:
-
Personal Details: Name, email, contact details.
-
Payment Information: Payment details processed securely through trusted third-party payment providers.
-
Health Data: Sensitive health data required for therapy and coaching services.
2. How We Use Your Data
We use your data for the following purposes:
-
Internal Record Keeping: To manage your account and support your requests.
-
Service Improvement: To enhance our services, products, and customer experience.
-
Marketing: To send you marketing materials via email (with your consent).
-
Research: To contact you for research purposes related to improving our services.
3. Cookies and Tracking Technologies
Our website uses cookies to enhance your user experience. Cookies are small text files stored on your device that help us analyse web traffic, ensure functionality, and personalise content. By using our website, you consent to the use of cookies. If you prefer, you can disable cookies through your browser settings, though this may affect the functionality of the site.
Essential Cookies: These cookies are required for the operation of our website and services.
Marketing and Analytics Cookies: These cookies help us analyse website traffic and offer targeted advertising.
For more information on how we use cookies, please refer to our Cookie Policy.
4. Data Retention
We will retain your data for as long as it is necessary to fulfil the purposes for which it was collected. After that, we will securely delete your data, unless we are required to keep it for legal, tax, or regulatory reasons.
Data Access Rights: You have the right to request access to, modify, or delete your personal data at any time. If you wish to exercise any of these rights, please contact us via email at info@miriam-isthisit.com.
5. Third-Party Sharing
We do not share your personal data with third parties except in the following circumstances:
-
Marketing: Data shared on social media for marketing purposes (e.g., client testimonials) will be done so confidentially and with prior consent.
-
Service Providers: We may use third-party platforms for payment processing, email marketing, or analytics. These providers are subject to confidentiality agreements and GDPR-compliant data handling practices.
6. Your Data Rights
Under the GDPR, you have the following rights regarding your personal data:
-
Right to Access: Request copies of the information we hold about you.
-
Right to Correct: Request corrections to inaccurate or incomplete data.
-
Right to Erase: Request the deletion of your data.
-
Right to Restrict Use: Request limitations on how we process your data.
-
Right to Data Portability: Request the transfer of your data.
-
Right to Object: Object to our processing of your data, including marketing or profiling.
For more information on exercising these rights, please contact us at info@miriam-isthisit.com.
7. Data Security
We implement technical and organisational measures to ensure the security of your data. This includes:
-
Password-protected accounts.
-
Encrypted servers and storage solutions.
-
Secure payment processing platforms.
-
End-to-end encrypted video calling platforms for remote therapy sessions.
We take all necessary steps to protect your data, but please note that no security system is completely foolproof. If you suspect unauthorised access to your data, please notify us immediately at info@miriam-isthisit.com.
8. Therapy and Coaching Confidentiality
Everything discussed during therapy or coaching sessions is confidential. Confidentiality will only be broken if there is a risk to your safety or the safety of others or if required by law. We will inform you first if confidentiality needs to be broken.
-
Remote Working: All therapy and coaching sessions are conducted in a private, confidential setting. We use video platforms that offer end-to-end encryption.
-
Clinical Supervision: I discuss cases with a supervisor for quality assurance. These discussions are confidential and use anonymised data.
-
Session Notes: Session notes are kept securely, either in a locked filing cabinet or password-protected digital format. These notes will be retained for up to seven years, after which they will be securely destroyed.
9. Data Transfers Outside the UK/EU
If you are located outside the UK/EU and are working with us, we may need to transfer your data across borders. We ensure that these transfers comply with GDPR requirements, such as using Standard Contractual Clauses or relying on adequacy decisions where applicable.
If you are located in a jurisdiction where data protection laws are less stringent, we will take extra precautions to ensure your data is adequately protected.
10. International Data Transfers
As I plan to work abroad, your data may be transferred to countries outside the UK or EU. We ensure that all such transfers are done in accordance with GDPR requirements, using suitable safeguards such as Standard Contractual Clauses or ensuring the country has an adequate level of data protection.
11. ICO Registration and GDPR Compliance
We are registered with the Information Commissioner's Office (ICO) and adhere to GDPR standards. If you have concerns about how your data is handled, you can file a complaint with the ICO.
For more information, visit the ICO Website.