top of page
Privacy Policy
Spiral – Creative Arts Therapies ("Spiral", "we", "us") is committed to protecting your privacy and handling your data responsibly. This policy explains what information we collect, why we collect it, and how we look after it.
Who we are
Spiral – Creative Arts Therapies SCIO (Scottish Charity No. SC050289) is registered with the Information Commissioner's Office (ICO) as a Data Controller.
What information we collect
When you make a referral, or otherwise get in touch with us, we may collect:
-
Contact details of the referrer (name, role, organisation, email, phone number)
-
Information about the young person being referred, including details relevant to their care, education, and wellbeing needs
-
Any other information you choose to share with us to support the referral
Some of this is classed as special category data under UK GDPR (for example, information relating to health or wellbeing). We only collect what we need, and only with appropriate consent.
why we collect it
We use this information to:
-
Assess and process referrals
-
Confirm eligibility for the relevant programme or funding stream
-
Deliver and coordinate creative arts therapy sessions
-
Meet our reporting obligations to funders (where information is shared, it is anonymised or aggregated wherever possible)
-
Keep accurate records in line with our safeguarding responsibilities
Our lawful basis for processing this information is your consent, alongside our legitimate interests as a charity delivering therapeutic support, and in some cases our safeguarding obligations.
how long we keep it
We do not sell or share your data for marketing purposes. We may share limited information with:
-
Funders, where required for reporting (usually anonymised)
-
Other professionals directly involved in supporting the young person, with appropriate consent
-
Regulatory or statutory bodies, where we are legally required to do so
your rights
Under UK GDPR, you have the right to:
-
Be informed about how your data is used
-
Access the information we hold about you
-
Have inaccurate information corrected
-
Request erasure of your information
-
Restrict or object to how your information is processed
-
Data portability
To exercise any of these rights, or if you have any questions about this policy, please contact us via the form below or call us on +44 7780 716516 - we aim to respond to all enquiries within one month.
Data Security
We take appropriate technical and organisational measures to keep your information secure, including restricted access, secure storage, and staff training on data protection.
changes to this policy
We may update this policy from time to time. The latest version will always be available on our website.
bottom of page