The Village
Privacy Notice
Last updated [CHECK: date of publication]
Who is responsible for your information
The data controller is Divya Berry Ltd, trading as The Village, whose therapy practice operates from The Wellness Hub, Unit 5, Old Stable House, rear of 53–55 North Cross Road, London SE22 9ET.
Divya C. Berry is the person responsible for how your information is handled. You can contact her about anything in this notice:
- Email: dcb@divyaberry.co.uk
- Phone: 07775 775913
- Post: [CHECK: correspondence address, if different from above]
Using this website
This website is a single page of information. It has no contact form, no booking system, no newsletter sign-up, no advertising, and no social media tracking.
Cookies. This website sets no cookies (see the cookie policy). It stores nothing on your device and does not track you between visits or across other websites.
Analytics. No analytics service is used on this site. Your visit is not profiled or measured.
Fonts. Typefaces are loaded from Google Fonts, which means Google receives your IP address in order to serve the font files. [CHECK: to remove this entirely, the font files can be hosted on your own server instead. Ask if you would prefer that.]
Server logs. The company hosting this site keeps standard technical logs, which may include your IP address, browser type and the time of your visit. These are used to keep the site running and secure, and are held on the lawful basis of legitimate interests. Hosting is provided by [CHECK: name of hosting provider].
If you follow a link from this page to make a phone call or send an email, that contact is handled as described in the next section.
When you get in touch
If you call, email or leave a message to ask about therapy, Divya will hold what you send her in order to reply and to arrange an introductory call. That usually means your name, your contact details, and whatever you have chosen to say about why you are getting in touch.
If you decide not to go ahead, this information is deleted within [CHECK: suggested 6 months] of your last contact.
If you become a client
Therapy requires records. The table below sets out what is held, why, and on what legal basis.
| Information | Why it is held | Lawful basis |
|---|---|---|
| Your name and contact details | To arrange and confirm sessions, and to reach you if a session must change | Contract (Article 6(1)(b)) |
| Brief session notes | To hold continuity between sessions and to support safe, competent practice | Legitimate interests (Article 6(1)(f)); for health information, provision of health or social care (Article 9(2)(h)) |
| Your GP's details and emergency contact | Held in case of serious risk to your safety or someone else's | Vital interests (Article 6(1)(d) and Article 9(2)(c)) |
| Payment records | To run the practice and meet tax and accounting obligations | Legal obligation (Article 6(1)(c)) |
Notes about your therapy are health information, which UK GDPR treats as special category data and protects more strictly. They are kept brief and factual, and are stored separately from your identifying details wherever practical.
Who else sees your information
Your therapy is confidential. Information is shared only in these situations:
- Clinical supervision. Like every registered therapist, Divya discusses her work with a clinical supervisor. This is a professional requirement of BACP registration and supports safe practice. Clients are referred to without names or identifying details, and the supervisor is bound by the same duty of confidentiality.
- Where there is serious risk. If there is a serious risk to your life or safety, or to someone else's, particularly a child or vulnerable adult, Divya may need to contact your GP, emergency services or the relevant safeguarding authority. Wherever possible she will discuss this with you first.
- Where the law requires it. Certain disclosures are compelled by law, including a court order or specific counter-terrorism and money laundering legislation.
- Practical service providers. Email, phone, accounting and any online session platform are provided by third parties acting on documented instructions. [CHECK: list the actual providers, for example your email provider, accountant, and video platform if used]
Your information is never sold, never used for advertising, and never shared for marketing of any kind.
How long it is kept
- Enquiries that do not become therapy: deleted within [CHECK: 6 months].
- Client records: kept for [CHECK: commonly 7 years after the last session, on insurer and professional guidance. Confirm the period your insurer and supervisor advise.]
- Financial records: six years after the end of the relevant accounting period, as UK tax law requires.
Once a retention period ends, paper records are shredded and electronic records are deleted.
How your information is protected
- Any paper notes are kept in a locked cabinet, separately from identifying details.
- Devices are password protected and encrypted, and are not shared with others.
- Email accounts and any practice software are protected with strong, unique passwords and two-factor authentication.
- Records are backed up securely so they are not lost. [CHECK: confirm this describes your actual arrangements, and amend anything that does not]
- This website is served over an encrypted HTTPS connection.
Marketing
Divya does not send marketing emails, newsletters or promotional messages, and there is no mailing list to join. If that ever changes you would be asked to opt in first, and every message would carry a one-click way to opt out. You can also object at any time by emailing dcb@divyaberry.co.uk.
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the information held about you
- have inaccurate information corrected
- ask for information to be deleted, where there is no overriding reason to keep it
- ask that use of your information be restricted while a concern is resolved
- object to information being used on the basis of legitimate interests
- receive certain information in a portable, machine-readable form
- withdraw consent at any time, where consent is the basis being relied on
To exercise any of these, email dcb@divyaberry.co.uk. You will normally receive a response within one month.
Some of these rights have limits. Clinical records may need to be retained even after a request for deletion, where an insurer or professional body requires it, or where they may be needed to defend a legal claim.
Complaints
If you are unhappy with how your information has been handled, please raise it with Divya first, so it can be put right.
You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection. ICO helpline 0303 123 1113, or ico.org.uk/make-a-complaint. Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Automated decisions and tracking signals
No decision about you is made by automated means, and no profiling is carried out. Nothing here scores you, sorts you, or predicts anything about you.
Some browsers send a Do Not Track signal. Because this site runs no tracking of any kind, there is nothing for that signal to switch off, and it is not acted on separately.
Technical records kept by the server
Running any website leaves a technical trail. The hosting company records requests made to the server, which can include an IP address, the time of the request, the page asked for, and the browser and operating system in use. These records exist to keep the site available, to diagnose faults and to detect abuse. They are not used to identify you or to build any picture of you as a visitor.
Disclosure required by law or to establish a claim
In rare circumstances, information may need to be used or disclosed to establish, exercise or defend a legal claim, or where a court, regulator or public authority lawfully requires it. Where that happens, no more is disclosed than the situation requires, and you will be told wherever it is lawful and safe to do so.
Other websites
This notice covers thevillage.click only. Links to other organisations, including Google Maps, the BACP register and divyaberry.co.uk, lead to sites with their own policies and their own approach to data. Those policies apply as soon as you arrive, and Divya has no control over them.
Some terms explained
Personal data is any information that identifies you, on its own or when put together with something else.
Special category data is a protected class of information covering health, sexuality, ethnicity, religion and similar. Anything discussed in therapy is likely to fall into it, which is why it is handled more carefully than a name or a phone number.
Data controller is whoever decides why and how information is used. Here that is Divya Berry Ltd.
Data processor is a company acting on the controller's instructions, such as an email provider or an accountant.
Lawful basis is the legal reason relied on for using information. UK GDPR requires one for ordinary personal data and a second, stricter one for special category data.
Making a request
Requests can be made by email or phone, and no particular form of words is needed. A response is given within one month, and if a request is complex you will be told before that month is up and given a reason.
You may be asked to confirm your identity first, so that information is not disclosed to the wrong person.
Where your information is held
Information is held in the United Kingdom. Where a service provider stores data outside the UK, the transfer is covered by the safeguards UK data protection law requires, such as an adequacy decision or standard contractual clauses. [CHECK: confirm once your providers are listed]
Changes to this notice
This notice may be updated from time to time. The date at the top shows when it last changed. If a change materially affects how your information is used, clients will be told directly.
← Back to The Village