Privacy Notice — The Granarium Ecosystem

Website Privacy Notice

This Privacy Notice explains how Granarium collects, uses, and protects your personal information when you visit this website or submit a consultation application form.

We operate as a Data Controller registered with the Information Commissioner’s Office (ICO). We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the UKCP Code of Ethics.

1. Information We Collect

When you interact with this website, we may collect:

Contact Information: Your name, email address, and phone number when you submit an application or contact form.

Screening Data: Any information you choose to share regarding your context to help us assess suitability for onward consultation work.

Technical Data: Basic website server logs (e.g., anonymised IP addresses, browser types, and pages visited) are processed automatically by our hosting platform to ensure site security and stable functionality. This processing does not track your personal data or place tracking cookies on your device.

2. Our Lawful Basis for Processing

Under the UK GDPR, we process your data under the following legal bases:

Consent: When you voluntarily submit a contact or application form.

Contract: To take steps at your request prior to entering into a consultation contract.

Special Category Data (Health): We only process information regarding your context to assess consultation suitability, under Article 9(2)(h) of the UK GDPR (provision of health or social care).

3. How We Store and Protect Your Data

All data submitted via this website is stored securely using encrypted cloud services. We enforce strict administrative and technical safeguards, including two-factor authentication and device encryption. We never share, sell, or rent your data to third parties for marketing purposes.

4. Data Retention

Applications not proceeding: If an application does not proceed to a booking, all submitted data is securely and permanently destroyed within 3 months.

Confirmed Bookings: If you proceed to book a consultation, your data will transition into our clinical record system, where it is retained for a standard period of 7 years from the date of the session to comply with professional indemnity insurance and legal regulations.

5. Your Rights

Under UK data protection law, you have rights including the right to access your data, rectify inaccuracies, or object to processing. You can exercise these rights at any time by contacting us directly. You also have the right to lodge a complaint with the ICO (www.ico.org.uk) if you have concerns about how your data is handled.

For any questions regarding this Privacy Notice or to exercise your data rights, please contact the Data Controller in writing at our registered business address:

Practice Name: Granarium

Attn: Data Protection Officer

Postal Address: Level One, Basecamp Liverpool, 49 Jamaica Street, Liverpool L1 0AH.