Privacy Policy
Last updated: July, 2026
Joanna Haworth Art Therapy, trading as Joanna Haworth Art and Therapy Services ("I", "me", "my"), is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how personal information is collected, used and protected when you visit artandtherapy.co.uk, contact me through the website, or enquire about my services.
This policy applies to information collected through this website only. If you become a therapy client, additional information will be collected and processed in accordance with my Contract and Working Agreement, which you will receive before therapy begins.
Who is responsible for your information?
Data Controller: Joanna Haworth
Email: jhartts@outlook.com
HCPC Registration: AS16800
ICO Registration: ZB976020
I am an HCPC-registered Art Psychotherapist and work in accordance with professional standards and ethical requirements set by the Health and Care Professions Council (HCPC).
What information I collect
When you contact me through this website, I may collect:
First name
Last name
Email address
The service you are interested in
Any information you choose to include in your message
I do not ask for or intentionally collect health information or clinical details through the website.
Please avoid including sensitive personal information or detailed information about your circumstances in your initial enquiry wherever possible.
How I use your information
I use your personal information to:
Respond to your enquiry
Provide information about my services
Arrange an initial conversation where appropriate
Manage enquiries and maintain appropriate business records
Improve my website through anonymous analytics
I do not sell your personal information.
Lawful basis for processing
Under UK GDPR, I process your personal information under one or more of the following lawful bases:
Legitimate interests – responding to enquiries and managing my practice.
Steps prior to entering into a contract – where you request information about therapy or other services.
Legal obligations – where required by law.
If you become a client, additional lawful bases will apply to the processing of your clinical information and these are explained in my Contract and Working Agreement.
Clinical records
If you become a therapy client, I will collect additional personal and, where necessary, special category information relating to your therapy.
This information is processed separately from the website and is explained in my Contract and Working Agreement before therapy begins.
Clinical records are stored securely and are accessible only to me unless disclosure is required or permitted by law.
Retention periods are:
Adults (18+): six years after the final therapy session.
Children and young people: six years after their eighteenth birthday.
During this retention period, clients have the right to request access to their information, update their personal information, or change any inaccuracies.
The personal data of a child belongs to that child and if the child has competency to consent to the processing of their personal data, then the wishes of the child may override any authority given by the parent or legal guardian.
All requests for clinical information will be considered in accordance with UK GDPR, the Data Protection Act 2018 and my professional responsibilities.
Children
I work with both adults and children.
Enquiries regarding children are normally made by a parent, legal guardian, social worker or education professional.
I do not knowingly collect personal information directly from children through this website.
Clinical supervision
As an HCPC-registered Art Psychotherapist, I undertake regular professional clinical supervision as an essential part of safe and ethical practice.
Clinical supervision supports reflection on my work and helps ensure that I provide the best possible standard of care.
During supervision, I may discuss aspects of my clinical work, including artwork or photographs of artwork, where this supports clinical reflection and professional practice.
Clinical supervisors are bound by professional and ethical duties of confidentiality. Information shared within supervision is treated as confidential and is used only for the purposes of professional reflection, maintaining safe practice and supporting the quality of my work.
Confidentiality
Confidentiality is fundamental to my work.
Information submitted through this website is treated confidentially and is only accessed and used for the purposes described in this Privacy Policy.
If you become a therapy client, confidentiality and its limits, including safeguarding responsibilities and legal obligations, are explained fully within my Contract and Working Agreement before therapy begins.
Website analytics
This website uses Google Analytics to help understand how visitors use the website, such as which pages are viewed and how visitors found the site.
Google Analytics collects information in a way that does not directly identify individual visitors.
Further information is available in the Cookie Policy.
Third-party services
This website is built using Squarespace.
I currently use:
Squarespace
Google Analytics
Google Search Console
International transfers
Some of the third-party service providers used to operate this website may process personal information outside the United Kingdom.
Where this happens, appropriate safeguards are used in accordance with UK data protection law to protect your information.
How long I keep website enquiries
Website enquiries are retained only for as long as reasonably necessary to respond to your enquiry, maintain appropriate business records or comply with legal obligations.
If you become a client, your information will instead be managed in accordance with my Contract and Working Agreement.
Keeping your information secure
I take appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or loss.
Only I have access to client records.
Paper records are stored securely, and electronic records are protected using appropriate security measures.
Your rights regarding website information
Under UK GDPR, you have rights regarding personal information collected through this website, including the right to:
Be informed about how your information is used
Request access to your personal information
Request correction of inaccurate information
Request deletion of information in certain circumstances
Request restriction of processing
Object to certain types of processing
Request data portability where applicable
To exercise these rights, please contact:
Requests will normally be responded to within one month. This may be extended by up to two further months where requests are complex or numerous.
Your rights as a therapy client
If you become a client, your rights in relation to your clinical information are explained in more detail within my Contract and Working Agreement.
While you have rights under UK data protection law, these rights are not absolute. As a registered healthcare professional, I may be required to retain clinical records for specified periods and may not always be able to erase, amend or disclose clinical notes where legal, ethical or professional obligations apply.
Complaints
If you have concerns about how your personal information has been handled, please contact me first so that I can try to resolve the matter.
Email: jhartts@outlook.com
If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO).
If your concern relates to my professional conduct as an HCPC-registered Art Psychotherapist, you may contact the Health and Care Professions Council (HCPC).
Changes to this Privacy Policy
I may update this Privacy Policy from time to time to reflect changes in legal requirements, professional practice or website functionality.
The latest version will always be published on this website.
This policy is governed by the laws of England and Wales.