1. Who I am
Dr Tammy Oluyori is a Counselling Psychologist based at Suite 4, Ellesmere House, Pennington Street, Walkden, Greater Manchester, M28 3LR. I act as the “data controller” for the personal information I collect through this website and my practice.
You can contact me about this policy by email at hello@drtammyoluyori.com or in writing at the address above.
2. Information I collect
I only collect information that is necessary for me to provide my services and respond to you. This includes:
- Contact information you provide — name, email address, telephone number and any details you choose to share when you fill out a contact form, send me an email, or reach out by phone or WhatsApp.
- Enquiry and session information — the content of your messages, the nature of your enquiry, and any information shared during initial assessment, therapy, coaching or supervision sessions.
- Newsletter information — your first name and email address if you subscribe to my newsletter.
- Insurance details — if you use private health insurance to pay for sessions, I may collect your policy number, insurer name and authorisation reference.
- Technical information — information your browser automatically sends, such as IP address, device type, browser type, referring page and pages visited. See my Cookie Policy for more.
3. How I use your information
I use your personal information to:
- Respond to your enquiries and arrange initial consultations.
- Provide therapy, coaching, assessment, consultancy, training and supervision services.
- Maintain clinical records that are required by my professional bodies and applicable law.
- Process insurance claims and payments.
- Send the newsletter if you have subscribed (you can unsubscribe at any time).
- Keep my website secure, prevent abuse, and improve how it works.
- Meet legal, regulatory and safeguarding obligations.
4. Legal basis for processing
Under the UK GDPR, I rely on the following legal bases to process your information:
- Consent — for newsletter sign-ups and any non-essential cookies.
- Contract — to deliver the therapy, coaching, training, supervision or consultancy services you have asked me to provide.
- Legal obligation — to meet professional, regulatory, safeguarding and accounting obligations.
- Legitimate interests — to respond to general enquiries, secure my website, and run my practice efficiently. Where I rely on legitimate interests, I will always balance those interests against your rights and freedoms.
- Vital interests — in rare cases where safeguarding requires disclosure to protect life.
Information shared during therapy or assessment is “special category” health data. I process it under Articles 9(2)(h) and 9(3) of the UK GDPR for the provision of health care, subject to the duty of confidentiality.
5. Who I share your information with
I keep your information confidential. I will only share it with third parties where I am legally required, where you have given consent, or where it is necessary to deliver the service you have asked for. These third parties may include:
- Your GP, psychiatrist or other healthcare professional — only with your explicit consent, except in safeguarding situations.
- Your private health insurer — to process authorisations and claims.
- My clinical supervisor — in line with my professional obligations, in an anonymised way wherever possible.
- Service providers that help me run the practice and website — including secure email, secure file storage, calendar booking, payment processing, accounting, and the website hosting platform (Webflow).
- Regulators or courts — if required by law, safeguarding obligations or a valid court order.
I do not sell your personal information to anyone, ever.
6. How long I keep your information
I keep your information only as long as needed for the purpose I collected it, plus any time required by law or my professional bodies. Indicative retention periods:
- Clinical records: at least 7 years after the end of therapy (or longer where required by law or for children, until 25 years after the date of the last entry).
- Enquiry emails that do not lead to therapy: up to 12 months.
- Accounting and tax records: 7 years.
- Newsletter subscribers: until you unsubscribe, plus a short period to action your request.
- Website analytics and cookie data: see my Cookie Policy.
7. Your rights under UK GDPR
You have the right to:
- Be informed about how your information is used (this policy).
- Access the personal information I hold about you.
- Have inaccurate information corrected.
- Have your information erased in certain circumstances (the “right to be forgotten”).
- Restrict or object to processing in certain circumstances.
- Data portability — receive a copy of your data in a portable format.
- Withdraw consent at any time where consent is the legal basis.
- Complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
To exercise any of these rights, email hello@drtammyoluyori.com. I will respond within one month.
8. Cookies and tracking
This website uses cookies and similar technologies. For full details, see my Cookie Policy.
9. Security
I take the security of your information seriously. I use reasonable technical and organisational measures to protect your information — including encrypted email where possible, secure cloud storage with reputable providers, strong passwords, two-factor authentication, and access controls. No system is perfect, so I cannot guarantee absolute security, but I work hard to keep your information safe.
10. Children
This website is intended for adults. I do not knowingly collect personal information from children under 13 through this website. Therapeutic work with children and young people is arranged separately with a parent or guardian and is subject to additional safeguarding considerations.
11. International transfers
Some of the service providers I use may be based outside the UK or EEA. Where this is the case, I rely on UK-approved transfer mechanisms (such as the UK’s International Data Transfer Agreement, the EU-US Data Privacy Framework where applicable, or other appropriate safeguards) to make sure your information remains protected to the same standard.
12. Changes to this policy
I may update this policy from time to time. The “Last updated” date at the top of the page will reflect the most recent change. Material changes will be communicated where appropriate.
13. Complaints and contact
If you have any concerns or questions about how I handle your personal information, please contact me first at hello@drtammyoluyori.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint.