Privacy policy

A starting point, not legal advice. This page was drafted as a sensible baseline for a small children's play-therapy practice. Have it reviewed against your own circumstances before relying on it.

Who I am. Seren Hughes, play therapist, trading as Little Kite Therapy, The Playroom, 18 Pontcanna Street, Pontcanna, Cardiff CF11 9QF. For anything in this policy, email hello@littlekitetherapy.co.uk.

Information about your child is handled with particular care

Most enquiries to this practice are about a child, and UK data protection law rightly treats children's information as deserving special protection. In practice that means three things here: I collect as little information about your child as possible at every stage, I never use information about a child for anything except their care, and nothing about your child is ever used for marketing, analytics or profiling of any kind. When you first get in touch, your child's first name and a sentence about what's going on is genuinely all that's needed.

What this website collects

As little as possible, on purpose.

• The contact and enquiry forms collect your name, your email address and whatever you choose to write in your message, nothing more. Please keep details about your child to a minimum at this stage; a first name and a brief outline is plenty, and a website form is not the place for the full story. Messages are delivered by Formspree and arrive in my practice inbox.
• Booking a chat happens through Cal.com, which asks for your name, email and chosen time under its own privacy policy.
• Analytics. This site uses Plausible, a privacy-first service that counts visits without cookies and without identifying you or your child. No advertising trackers, ever.

What happens in the playroom stays elsewhere

Clinical records, session notes, and anything your child expresses in the work itself are not held on or connected to this website. They are kept securely and confidentially in line with Play Therapy UK requirements, for the retention period its guidance and insurance require, and I explain exactly how at the parent consultation before any work begins.

How long I keep website messages

Enquiry emails are kept while we're in conversation and deleted within 12 months if we don't end up working together, including anything they mention about your child.

Your rights, and your child's

Under UK GDPR you can ask me what personal data I hold about you or your child, ask for a copy, ask for corrections, or ask for deletion. Email me and I'll respond within a month. Requests that touch a child's clinical records are handled with the same care as the records themselves, and always with your child's best interests as the first test. If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.