Privacy Notice

Effective date: 22/04/2026
Business name: Honeypot Practice
Contact email: elise@honeypotpractice.co.uk

1. Who I am

Honeypot Practice provides independent speech and language therapy services. I am the data controller responsible for how your personal data is used.

2. What information I collect

I may collect and process the following information:

Parent / carer information

  • Name

  • Contact details (email, phone number, address)

Child information

  • Name and date of birth

  • Health, developmental and educational information

  • Assessment results, therapy notes, and reports

Administrative information

  • Appointment details

  • Communication records (emails, messages)

  • Payment and invoicing information

3. How your information is collected

Information is collected when you:

  • Contact me via the website, email or phone

  • Complete forms (e.g. case history, consent forms)

  • Engage in therapy sessions or assessments

4. Why I use your information (purpose and lawful basis)

I use your data to:

  • Provide speech and language therapy services

  • Communicate with you about appointments and care

  • Write reports and share relevant information (e.g. with schools and other professionals, with consent)

  • Manage my business administration

Lawful bases under UK GDPR

  • Contract: to provide agreed services

  • Legitimate interests: to run and manage the practice effectively

  • Healthcare provision: for processing health-related (special category) data

5. Sharing your information

Your information may be shared with:

  • Schools or nurseries (where relevant and agreed)

  • Other professionals involved in your child’s care (with consent)

  • Service providers (e.g. secure email, cloud storage, accounting software)

I do not sell or share your data for marketing purposes.

6. How your data is stored

Your data is stored securely using:

  • Password-protected systems

  • Secure cloud storage

  • Professional email systems

Only necessary information is retained, and access is limited to the data controller.

7. How long I keep your data

I retain records in line with professional guidance for speech and language therapists and UK healthcare record-keeping standards.

  • For children’s records, information is typically retained until the child reaches age 25 (or 26 if they were 17 at the end of therapy)

  • For young people seen aged 16 or over, records are typically retained for 8 years after the end of care

  • For adults, records are typically retained for 8 years after the end of care

These timeframes are based on guidance from the Royal College of Speech and Language Therapists and wider UK healthcare record management standards.

After the relevant retention period, records are securely deleted or destroyed.

In some circumstances, records may be kept for longer where there is a legal or safeguarding reason to do so.

8. Your rights

Under UK data protection law, you have the right to:

  • Access your data

  • Request correction of inaccurate data

  • Request deletion of data (in certain circumstances)

  • Restrict or object to processing

  • Request transfer of your data

To exercise any of these rights, contact: elise@honeypotpractice.co.uk

You also have the right to complain to the Information Commissioner’s Office (ICO).

9. Cookies and website data

If you use the website, basic data such as IP address and browsing behaviour may be collected for analytics purposes (e.g. via Squarespace). This helps improve the website.

10. Contact

If you have any questions about this privacy notice or how your data is handled, contact:

Email: elise@honeypotpractice.co.uk

11. Updates to this notice

This privacy notice may be updated from time to time. The latest version will always be available on the website.