Privacy Policy

Sally Campion EFHD is committed to protecting your privacy and handling your personal data transparently, securely, and in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the UK GDPR.

This Privacy Policy explains how we collect, use, and protect your personal data when you engage with our Equine Facilitated Human Development (EFHD) services, including through our website, in-person sessions, email communications, and other contact.

1. Data Controller

The data controller for your personal data is:

Sally Campion EFHD

Lakes Lane Stables

Lakes Lane

Newport Pagnell

MK16 8EE
campionsally@gmail.com

If you have any questions or concerns about this policy or your data, please contact us using the details above.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a. Identity and Contact Data

Full name, date of birth, gender
Phone number, email address, postal address
Emergency contact details

b. Health and Session Data

Medical history relevant to participation in EFHD sessions
Mental and emotional health information (if shared voluntarily)
Session notes and intake forms
Consent forms
Photos or videos (only with explicit consent)

c. Website and Technical Data

IP address, browser type, device ID, and usage data (via cookies—see cookie policy if applicable)

3. Legal Basis for Processing

Under GDPR, we process your personal data based on one or more of the following legal bases:

Consent – for certain uses, such as marketing or photographs
Contractual necessity – to provide the EFHD services you request
Legal obligation – to comply with relevant laws (e.g. health recordkeeping)
Vital interests – in case of an emergency
Legitimate interests – for administrative, safety, and service improvement purposes

You have the right to withdraw your consent at any time.

4. How We Use Your Data

We use your data to:

Provide and tailor EFHD services safely and effectively
Communicate with you regarding appointments, updates, or services
Record and monitor session progress (with your informed consent)
Manage payments and invoicing
Fulfill legal or insurance obligations
Improve our service quality

We do not use your data for automated decision-making or profiling.

5. Data Sharing and Third Parties

We will never sell or rent your personal data.

We may share your information with:

Licensed professionals involved in your care (if applicable and with your consent)
Emergency services or your emergency contact (only when necessary)
Professional advisors (e.g. accountants, legal representatives) under confidentiality
IT or website service providers (only for secure data hosting or processing)

All third parties are required to respect the confidentiality and security of your data and to process it only in accordance with GDPR.

6. International Transfers

We aim to store and process your data within the European Economic Area (EEA). If we ever need to transfer your data outside the EEA, we will ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

7. Data Retention

We retain your data only as long as necessary for:

Providing services
Fulfilling legal or regulatory requirements
Defending legal claims (where applicable)

Typical retention periods:

Client session records: up to 7 years after the last session (subject to national laws)
Marketing or consent records: until consent is withdrawn

Data will be securely deleted or anonymized after this period.

8. Your Rights Under GDPR

You have the following rights under GDPR:

Right to access – obtain a copy of your personal data
Right to rectification – request correction of inaccurate or incomplete data
Right to erasure ("right to be forgotten") – request deletion of your data, under certain conditions
Right to restrict processing – in certain situations
Right to data portability – receive your data in a structured format
Right to object – to processing, including for direct marketing
Right to withdraw consent – at any time where processing is based on consent
Right to lodge a complaint – with a supervisory authority (see below)

To exercise any of these rights, contact us at [Your Email Address].

9. Supervisory Authority Contact

If you believe your data protection rights have been violated, you may lodge a complaint with your local supervisory authority:

For the UK:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk

For EU residents:
Find your relevant authority here:
https://edpb.europa.eu/about-edpb/board/members_en

10. Data Security

We take data protection seriously and implement appropriate technical and organizational security measures to protect your data from unauthorized access, loss, or misuse.

These may include encrypted storage, secure password practices, and physical security for any paper records.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website or provided upon request. We encourage you to review it regularly.

12. Contact Us

If you have questions, requests, or concerns about this policy or your personal data, please contact:

Sally Campion EFHD

Lakes Lane Stables

Lakes Lane

Newport Pagnell

MK16 8EE
campionsally@gmail.com