Privacy Policy

Who are we?

Springboard Speech and Language Ltd is an independent speech and language therapy practice. It is owed and directed by Chris and Hilary Platt.
Springboard Speech and Language Ltd is registered with the Information Commissioner’s Office (ICO) as a data controller.
This policy relates to our website www.springboardspeech.org.uk. This policy outlines the data that is collected when you visit our site or make an enquiry to us, and how we process that in a confidential and secure manner.
This policy will be updated from time to time. This current version is effective from 16 December 2019.

Terms

‘Us’ ‘our’ ‘we’ refer to Springboard Speech and Language Ltd / the Directors.

Personal Information: What do we collect, why do we collect it, and how long do we keep it?

1. Browsing the website
You may use the springboardspeech.org.uk website without providing any personal information.

2. Enquiries
We are contacted via the ‘contact us’ page, email, phone and in person to enquire about one or more of our services (therapy, schools-commissioned service, training).

What personal data do we have and ‘process’?
Personal data provided to us at this stage may include, name, age, address, school attended / place of work, medical/health information, personal/family circumstances.

Why it is needed? What is the lawful basis for processing?
You provide us with this information so that we can determine if we are suitable (and have the availability) to meet your requirements.
The lawful basis = contract.

How long is the data kept?
(retention period)
If we are able to fulfil your enquiry then the information gathered from your initial enquiry (and a record of our response) forms part of the clinical record, employment /placement record, or training record (and you will be issued with our full privacy policy at that time).

If we are unable to fulfil your enquiry we retain your information for up to 24 months as we often receive re-enquiries and need to refer back to previous correspondence. Please note we will not make unsolicited contact with you in this time.

Sharing personal data

We will not share your information with any third parties for the purposes of direct marketing.

Information is only shared within our organisation on a ‘need to know’ basis i.e. for administration purposes or to carry out services.

We share information where there is a safeguarding concern (wherever possible we seek consent before sharing information in these circumstances but if this is not possible and a concern remains that a child may be at risk of significant harm we will contact the appropriate authorities).

Storing personal data securely

Electronic data is stored locally on our computers and may also be stored in the ‘cloud’ through our Microsoft Office 365 accounts. All data in our Office 365 accounts is stored within UK data centres. For more information regarding Microsoft Office 365 and data security please see:
https://www.microsoft.com/en-us/trustcenter/privacy/gdpr or search for ‘office 365 gdpr compliance’.
In addition to this we also use a range of safeguards to secure electronic data including:
• Full disc encryption via Bitlocker.

• Pre-boot PIN to access hard drives.

• Secure Windows Passwords.

• 2-Factor authentication for account logins.

• Business Grade internet security and virus protection.

Physical data (i.e. paper records) All such data will be stored in locked metal filing cabinets in offices which are also locked and alarmed when not in use.

Your rights

Under data protection law you have rights that we are required to tell you about:
The right to be informed about the personal data we hold and process.
This privacy notice provides details of the information we collect, process and archive. If you would like more information please contact us using the details provided above.

The right of access.
You have the right to access the data we hold about you (or a child you have parental responsibility for). You can make this request verbally or in writing and we have to respond within one month.

The right to rectification.
If you believe we hold inaccurate data then you have the right to ask for it to be amended. We will carefully consider all requests as soon as possible after they are made and respond within the given timeframe of one month.

The right to erasure.
You have the right to ask us to erase your personal information, and in some circumstances we will be able to agree to this. Please note that this is not an ‘absolute’ right and it will not apply in some circumstances, for example, for clinical records until the retention periods are completed.

The right to restrict processing.
You have the right to request that the use of the personal data we hold about you / your child is limited and we must respond within one month.

The right to object
You have the right to ask us to stop processing your personal data.This right only applies in certain circumstances.

The Information Commissioner’s Office (ICO) website http://ico.org.uk contains more information on these rights – the circumstances when they may / may not apply.

Linking to other websites / third party content

Where we provide links to websites of other organisations, these websites are out of our control and are not covered by this privacy notice. We encourage you to read the privacy notices on the other websites you visit.

How we use cookies

A cookie is a small file that contains a unique alphanumeric code selected randomly.
This cookie is stored on your computer. Cookies are used, for example, to count the total number of unique users who are accessing a website over a particular period of time, or to see which pages are most frequently viewed.

Our website uses cookies to collect data about its activity. Cookies do not identify the person at the computer, and information gathered is not shared with third parties. It is used to monitor the use of the website and provide us with raw data we can use to judge, and demonstrate, the website’s effectiveness.

Session cookie
This is used so we can track the user from one page to the next but we are not capturing any details about the user. For example, we might use this to keep a collapsible menu in the same state between page requests.

First party cookies
Google Analytics is a web analytics tool that helps website owners understand how visitors engage with their website. Google Analytics customers can view a variety of reports about how visitors interact with their website so that they can improve it.

Like many services, Google Analytics uses first-party cookies – our primary reason for this is that third-party cookies are often blocked by browsers. The cookies are used to track visitor interactions as in our case, where they are used to collect information about how visitors use our site. We then use the information to compile reports and to help us improve our site.

Contacting us

You can email us at office@springboardspeech.org.uk or call us on 0780 123 9490.