Privacy policy
Your privacy is important. This policy explains how your personal information is used, stored, and protected.
Information we collect
We only collect and process personal data necessary to respond to enquiries and provide services.
If you make an enquiry, we will hold the information you choose to share.
If you book a session, we may also hold:
- appointment and booking records
- invoices and payment records
- email correspondence and other communications
- information shared during sessions, where relevant
How your information is used
Your information is used only to:
- respond to your enquiry
- arrange and provide sessions
- meet legal, regulatory, and contractual obligations
Your personal data is not sold, used for marketing purposes, or shared with third parties, except where necessary to provide services, where required by law, or with your explicit consent.
Use of third-party systems
To provide services efficiently, secure cloud-based systems may be used for:
- scheduling and booking
- invoicing and accounting
- document signing
- secure file and data storage
These systems are password-protected and use additional security measures, such as two-factor authentication where available. Providers act as data processors in accordance with UK GDPR.
Communications
If you become a client, you may receive necessary service-related communications, including appointment confirmations, invoices, and reminders.
You will not be added to any marketing mailing list unless you explicitly subscribe. You may unsubscribe at any time.
Data storage and retention
Personal information is stored securely, with access restricted where possible.
Records may be retained for a minimum period of eight years where required by professional or insurance obligations. After this period, records are securely deleted.
Data security
Reasonable steps are taken to protect your data. However, no electronic communication or storage system can be guaranteed to be completely secure. Email and messaging should not be considered fully confidential.
Cookies and website analytics
This website uses cookies and basic analytics tools to understand website use and improve functionality. No personally identifiable information is collected for marketing purposes.
Your rights
Under UK GDPR, you have the right to:
- access the personal data held about you
- request correction of inaccurate data
- request restriction or erasure of data, where legally applicable
Requests will be responded to within statutory time limits.
Data controller
The data controller is Dr Emma Rae Rhead.
Dr Emma Rae Rhead is registered with the Information Commissioner’s Office (ICO).
ICO Registration Number: ZA164418
Contact
Email: emma@doctorrhead.com
Website: www.doctorrhead.com
If you have any concerns about how your data has been handled, please get in touch in the first instance. You also have the right to lodge a complaint with the ICO.
Last updated: 2 April 2026