Privacy Policy

This privacy notice tells you how I, Helen Brocklebank-Clark, use and protect the personal information you give me. It was last updated in June 2026 and will be reviewed once a year.

As a data controller, I am committed to:

Only collecting, storing and processing the information I need to provide a service.
Keeping your records secure and accurate.
Only keeping your information as long as is required.
Collecting, storing and using the information you provide in a manner that is compatible with the UK General Data Protection Regulation and the Data Protection Act 2018.
Maintain registration with the Information Commissioner’s Office. My registration number is ZC175455 and my registration details can be found on the public register of data controllers.

The type of personal data I collect:

I electronically hold identifiable personal data, such as your name, email address, and phone number.

I might also hold and publish:

Photos of our work together. I will only publish this with your explicit consent and once you have completed and signed a photo consent form.
Feedback on the service I have provided. I will only publish this with your explicit consent.

The reason I collect personal data:

I process information about you to allow me to provide you with a service, share information you have requested, and seek payment for the service I have provided.

Photos and feedback captured will be used for promotional purposes, to enhance my practice or to demonstrate impact.

Where I get your personal data from:

Most of the personal information I hold about you is provided directly by you. This may be when you contact me, complete a form, request a service, provide feedback, sign a consent form, or share information with me as part of our work together.

I may also receive limited information from service providers that support my business, such as my website provider or accounting software provider. Any information I receive from third parties will be handled in line with this Privacy Notice.

Sharing your personal data:

I would not share information that identifies you unless:

You have given me permission.
I am lawfully required to report information to the appropriate authorities e.g. to prevent fraud or a serious crime.
It is necessary to protect children and at-risk adults from harm.
A formal court order has been served upon me.
I need to engage a debt collection agency to recover unpaid debt.

Such transfers are limited, recorded, and secure.

The lawful basis for processing your personal data:

I am a sole trader, processing personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable health and care legislation.

Different legal bases apply depending on the type of information being processed and the purpose of the processing. The most commonly used legal bases include:

Article 6 (1) (a) - consent

Article 6 (1)(b) – contract
Article 6 (1)(c) – legal obligation
Article 6 (1) (ea) – recognised legitimate interests
Article 6 (1) (f) – legitimate interests

How long I keep your data for:

I legally have to retain invoice records for 6 years after the accounting period to which they relate.

I will retain personal data for no longer than it is needed. Depending on the purpose for holding the data, this will be a minimum of 3 months and a maximum of 1 year.

When I no longer need to process your personal data for the reason I collected it, I will destroy it securely. make sure you destroy it securely.

Your rights:

Under the General Data Protection Regulation you have certain rights in relation to the information I hold about you. These include:

Right to be informed about the processing of your data
Right of access to the data held about you
Right to rectification.
Right to be forgotten.
Right to restrict processing.
Right to have your data transferred to another organisation (data portability)
Right to object to processing
Rights related to automated decision making and profiling. Please note, I do not use automated decision-making (making a decision solely by automated means without any human involvement).

To exercise any of your rights under Data Protection legislation, please email me at helen.b-clark@hotmail.com.

Not all rights apply equally and are dependent on the lawful basis for processing.

Further information can be found on the Information Commissioner's Office website. Visit the ‘Lawful Basis for Processing’ section.

How I keep your information safe:

All information I hold about you is held securely and confidentially, using administrative and technical controls.

I have a legal responsibility to uphold confidentiality and undertake appropriate and on-going data protection training to maintain my awareness of my responsibilities. I last completed Data Protection & UK GDPR Training v12 with High Speed Training in June 2026.

I user the minimum and proportionate amount of personal information necessary and only process your data if I have a legal basis to do so.

If there is a data breach:

I will carry out an investigation to identify what caused the breach, who is affected and stop it happening again.

Within 72 hours of identifying a data breach I will tell the Information Commissioner's Officer, and if there is a high risk of your rights and freedoms being affected, I will also tell you.

Whether I am required to tell you or not, I will keep records of any personal data breaches.

How to make a Data Subject Access Request:

Under the UK General Data Protection Regulation, you can access or review the personal information I hold about you by making a ‘data subject access request’.

To make a request for your personal information, contact me directly at info@helenbrocklebankclark.co.uk, putting Subject Access Request in your email subject line. I will process your request as soon as possible, and within one calendar month of receiving your request.

To find out more about data subject access requests, including what to ask for, visit the Information Commissioner's Office: Getting copies of your information (SAR) webpage.

What to do if you have a concern about how I am processing your personal data:

I am committed to keeping your personal data secure and take any concerns about the use of personal information seriously.

If you have a question, complaint or concern about how I am using your personal information, please contact me at helen.b-clark@hotmail.com and I will investigate and provide a response within 30 days.

You also have the right to complain directly to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues, if you remain dissatisfied with how your information has been handled. The details you need are:

Information Commissioner’s Office
Wycliffe House
Wilmslow
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk/

Does your website use cookies to understand how I use your site?

Yes. This website may use cookies and similar tracking technologies throughout their services. This is done to:

Provide you with a great experience.
To monitor and analyze the performance, operation and effectiveness of it's platform.
To ensure it’s platform is secure and safe to use.

You will be asked to give your permission before non-essential cookies are used.

Read Cookie Policy | Wix.com to learn more.

My contact details:

Name: Helen Brocklebank-Clark

Address: 12 Cavendish Crescent, Carlton, NG4 3PQ.

Email: info@helenbrocklebankclark.co.uk

Phone number: 0774 108 2445

Disclaimer:

This website may include references to external websites, services or products for which Helen Brocklebank-Clark accepts no responsibility. This information is given without any representation or endorsement of those websites, services or products.

Access this section in Easy Read.

Privacy Notice last updated June 2026.