GDPR Policy

Data Controller: Rosie Quayle, trading as Rosie Quayle Speech & Language Therapy, Marsh Gibbon, Oxfordshire/Buckinghamshire.

What data we collect

When you contact us or book a session, we may collect personal information including your name, email address, phone number, and information about your child including their date of birth, medical history, and communication needs. This information is necessary to provide you with a safe and effective therapy service.

How we use your data

Your data is used solely for the purpose of delivering speech and language therapy services, maintaining clinical records, and communicating with you about appointments and progress. We do not share your data with third parties except where required by law or where you have given explicit consent (for example, to liaise with your child's school or medical team).

Data retention

Clinical records are retained for a minimum of seven years following the end of therapy, or until a child reaches the age of 25 (whichever is later), in line with professional guidance from the RCSLT. After this period, records are securely destroyed.

Your rights

Under UK GDPR, you have the right to access, correct, or request deletion of your personal data, and to withdraw consent at any time. To exercise any of these rights, please contact us using the form on the For Families page.

Data security

All personal data is stored securely. Electronic records are password-protected and encrypted. Paper records, where used, are kept in a locked cabinet and are not accessible to third parties.