Privacy Notice
Effective date: 01/09/2026
Business name: Honeypot Practice
Data Controller: Elise Bacarese-Hamilton
Contact email: elise@honeypotpractice.co.uk
1. Who I am
Honeypot Practice provides independent Speech and Language Therapy services to children and families, including services commissioned directly by parents/carers and services commissioned by schools and other organisations.
Elise Bacarese-Hamilton, trading as Honeypot Practice, is the Data Controller and is responsible for deciding how and why personal information is processed.
This Privacy Notice explains what personal information Honeypot Practice collects, why it is used, how it is protected and your rights in relation to that information.
2. What information I collect
The information collected will depend on the services being provided and may include:
Child information
Name, date of birth and contact details
Health and medical information
Developmental history
Speech, language and communication information
Educational information
Information about hearing
Diagnoses, medication, allergies and relevant medical risks
Assessment results
Therapy notes and clinical observations
Therapy plans, programmes and recommendations
Reports
Audio, video or photographs where specific consent has been provided
Information about other professionals involved in the child's care, education or support
Parent/carer information
Name
Relationship to the child
Contact details, including email address, telephone number and address
Relevant communications and correspondence
Administrative information
Appointment and attendance information
Emails, messages and other correspondence
Invoices and payment information where applicable
Records relating to the administration and delivery of services
Some of the information Honeypot Practice processes, particularly information relating to health, development and therapy, is special category personal data and receives additional protection under UK data protection law.
3. How your information is collected
Personal information may be collected directly from you or your child when you:
Contact Honeypot Practice
Make an enquiry
Complete a form
Provide reports or other documents
Attend an assessment or therapy session
Communicate with Honeypot Practice by email, telephone or other means
Where appropriate, information may also be received from other people or organisations involved in your child's care, education or support. This may include:
Schools and nurseries
Teachers and Special Educational Needs Coordinators
NHS Speech and Language Therapists
GPs and paediatricians
Educational psychologists
Occupational therapists
Other relevant health, education or care professionals
Where a school or another organisation commissions Speech and Language Therapy for a child, some information may be provided to Honeypot Practice by that organisation in order to arrange and deliver the service.
4. Why I use your information
Personal information may be used to:
Respond to enquiries
Arrange and provide Speech and Language Therapy assessments and intervention
Understand a child's speech, language and communication needs
Plan, deliver and review therapy
Maintain appropriate clinical records
Prepare reports, therapy programmes and recommendations
Communicate with parents/carers
Communicate and work with schools and relevant professionals where appropriate
Manage appointments and attendance
Manage invoicing, payments and other business administration
Meet professional, legal, regulatory and safeguarding responsibilities
Establish, exercise or defend legal claims where necessary
Honeypot Practice only collects and uses information that is reasonably necessary for these purposes.
5. Lawful basis for processing personal information
Under the UK General Data Protection Regulation, Honeypot Practice must have a lawful basis for processing personal information.
Depending on the circumstances and purpose of the processing, Honeypot Practice may rely on:
Contract
Where processing is necessary to enter into or perform a contract for Speech and Language Therapy services, for example where a parent/carer directly commissions services from Honeypot Practice.
Legitimate interests
Where processing is necessary for the legitimate interests of providing, managing and administering a professional Speech and Language Therapy practice, provided those interests are not overridden by the rights and interests of the individual.
This may include maintaining appropriate records, communicating about services, managing the practice and, where appropriate, delivering services commissioned by a school or other organisation.
Legal obligation
Where processing is necessary to comply with a legal or regulatory obligation.
Vital interests
In exceptional circumstances, information may be processed where this is necessary to protect someone's life.
Consent
Consent may be relied upon for specific optional activities where appropriate. Where Honeypot Practice relies on consent, you will be told what you are consenting to and you may withdraw that consent.
Consent to receive Speech and Language Therapy is separate from the lawful basis relied upon to process personal information under data protection law.
6. Special Category Personal Data
Information about a person's health is classed as special category personal data and is subject to additional protections.
In addition to an appropriate lawful basis under Article 6 of the UK General Data Protection Regulation, Honeypot Practice processes health and other relevant special category information where necessary for:
the provision of health care or treatment under Article 9(2)(h) of the UK General Data Protection Regulation and the relevant provisions of the Data Protection Act 2018.
Speech and Language Therapy is a regulated health profession and clinical information is handled subject to professional duties of confidentiality.
Where explicit consent is relied upon for a particular optional use of special category information, this will be requested separately.
7. Sharing Information
Information is only shared where there is an appropriate reason to do so.
Depending on the circumstances, relevant information may be shared with:
Parents and carers
Schools, nurseries, teachers and Special Educational Needs Coordinators
NHS Speech and Language Therapists
GPs and paediatricians
Educational psychologists
Occupational therapists
Other health, education or care professionals directly involved in the child's support
Organisations commissioning the Speech and Language Therapy service, where appropriate
Professional or regulatory bodies where required
Safeguarding authorities or other appropriate organisations where necessary to protect a child or another person
Service providers that process information on behalf of Honeypot Practice
Only information that is relevant and necessary for the purpose will be shared.
Honeypot Practice does not sell personal information and does not provide clinical information to third parties for their own marketing purposes.
8. Service Providers and Digital Systems
Honeypot Practice uses third-party services to support the operation of the practice. These may include providers of:
Professional email
Secure cloud storage
Practice administration and record keeping
Accounting and invoicing
Website hosting and analytics
Electronic forms and document management
Artificial intelligence-assisted clinical documentation
Where a service provider processes personal information on behalf of Honeypot Practice, appropriate data protection arrangements are used and providers are expected to process information only for authorised purposes and with appropriate security measures.
Artificial intelligence-assisted clinical documentation
Where specific consent has been provided, Honeypot Practice may use artificial intelligence-assisted software to support clinical documentation. This may involve processing session audio to assist in producing draft clinical notes.
Artificial intelligence-generated material is used only to assist the therapist. Clinical records are reviewed and finalised by the Speech and Language Therapist, who remains professionally responsible for their content.
Choosing not to consent to optional artificial intelligence-assisted documentation will not prevent a child from receiving Speech and Language Therapy.
9. How Information is Protected
Honeypot Practice takes appropriate measures to protect personal and clinical information.
These include, where appropriate:
Password-protected systems and devices
Secure cloud-based systems
Professional email systems
Access controls
Secure storage of clinical records
Appropriate security arrangements with service providers
Access to personal information is limited to those who require it for an appropriate purpose.
No method of electronic storage or transmission can be guaranteed to be completely secure, but reasonable and appropriate measures are taken to protect the information held.
10. How Long Information is Kept
Clinical records are retained in accordance with applicable professional guidance and healthcare record-management requirements.
For children's clinical records, Honeypot Practice currently retains records until the child's 25th birthday, or 26th birthday if the young person was 17 when treatment ended, unless there is a legal, safeguarding or other appropriate reason to retain information for longer.
Other personal and administrative information is retained only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, financial, professional and regulatory requirements.
When information is no longer required, it is securely deleted or destroyed.
11. Confidentiality and Safeguarding
Clinical information is treated confidentially in accordance with professional and legal obligations.
Information may be shared without consent where there is an appropriate legal or professional basis for doing so. This may include circumstances where:
There is a safeguarding concern involving a child or another person
Disclosure is required by law
Information is required by a court or other body with appropriate legal authority
Disclosure is otherwise necessary and permitted under applicable professional or legal obligations
Where possible and appropriate, the person concerned will be informed about such a disclosure.
12. Your Data Protection Rights
Depending on the circumstances and the lawful basis relied upon, you may have the right to:
Ask for access to personal information held about you or your child
Ask for inaccurate or incomplete information to be corrected
Ask for personal information to be deleted in certain circumstances
Ask for processing to be restricted in certain circumstances
Object to certain processing
Request transfer of information in certain circumstances
Withdraw consent at any time where consent is the lawful basis relied upon for a particular processing activity
These rights are not absolute and do not apply in every circumstance. For example, Honeypot Practice may be required to retain clinical records even where a request for deletion is made.
To exercise a data protection right, please contact:
elise@honeypotpractice.co.uk
13. Complaints About the Use of Personal Information
If you have concerns about how your personal information or your child's information has been handled, please contact Honeypot Practice in the first instance:
Elise Bacarese-Hamilton
Honeypot Practice
Email: elise@honeypotpractice.co.uk
You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Information about raising a concern is available from the Information Commissioner's Office.
14. Website and Analytics
When you visit the Honeypot Practice website, information such as your IP address, device information and browsing activity may be processed through the website platform and any analytics or cookie technologies in use.
Where consent is legally required for non-essential cookies or similar technologies, these technologies will only be used in accordance with the choices made through the website's cookie controls.
Further information about cookies may be provided through the website's cookie notice or cookie settings.
15. Contact
For questions about this Privacy Notice or how personal information is handled, please contact:
Elise Bacarese-Hamilton
Honeypot Practice
Email: elise@honeypotpractice.co.uk
16. Changes to This Privacy Notice
This Privacy Notice may be updated from time to time to reflect changes to the services provided, technology used, professional guidance or legal requirements.
The most recent version will be available on the Honeypot Practice website.