Privacy Policy
At our drama healing therapy practice, we take your privacy seriously and are committed to safeguarding your personal information. We understand that participating in therapeutic activities can involve sharing sensitive details about your life and experiences. Therefore, we ensure that all confidential data collected during sessions is treated with the highest level of security and care. Your information will only be used for the purposes of enhancing your therapeutic experience and will never be shared with third parties without your explicit consent. We encourage you to review our privacy policy for more comprehensive details on how we manage and protect your data, ensuring a safe space for your healing journey.
Privacy Policy
Drama Healing Therapy | Last updated: June 2026
Our Commitment to You
We understand that the people we support have often experienced serious harm. Protecting the
privacy and safety of everyone who uses our services is not just a legal obligation — it is central
to everything we do. We handle all personal information with the highest level of sensitivity, care,
and confidentiality.
1. Who We Are
TGG Holistic Collective ("we", "us", "our") is a drama healing therapy service supporting
survivors of domestic abuse. We are based at [Address], [City], [Country].
Data Controller TGG Holistic Collective,
Email hello@tggholisticcollective.co.uk
Phone 07577508920
2. What Personal Information We Collect
Because of the sensitive nature of our work, we collect only what is necessary to provide
safe, effective therapeutic support. We collect:
2.1 Identity & Contact Information
• Full name
• Home address
• Contact phone number and/or email address
2.2 Therapeutic Journey & Progress Files
For each participant, we maintain a personal file that may include:
• Session notes and reflections from drama therapy activities
• Progress records and therapeutic goals
• Notes on emotional wellbeing and any safeguarding concerns
• Consent forms and intake documentation
2.3 Special Category Data
Important: Sensitive Data
Information relating to domestic abuse, mental health, and personal trauma constitutes "special
category" data under data protection law. We treat this with the strictest confidentiality. It is used
solely to provide you with therapeutic support and to keep you safe.
3. How We Use Your Information
We use your personal information to:
• Deliver drama therapy sessions and support your therapeutic journey
• Maintain accurate records of your progress and needs
• Contact you about appointments or service updates
• Fulfil safeguarding duties where there is a risk to your safety or the safety of others
• Meet our legal and regulatory obligations
We will never use your information for marketing, fundraising appeals, or any purpose
unrelated to your care without your explicit consent.
4. Our Legal Basis for Processing
Under data protection law (UK GDPR / EU GDPR), we rely on the following legal bases:
Legal Basis When We Use It
Consent For collecting your therapeutic journey file and any optional
information
Vital Interests To protect your life or the lives of others in safeguarding situations
Legal Obligation To comply with safeguarding law, reporting duties, and regulatory
requirements
Legitimate Interests For administrative purposes such as scheduling and service
improvement
5. Confidentiality & Safeguarding
Everything you share with us is treated as strictly confidential. However, there are limited
circumstances where we may be required to share information without your consent:
• If we believe you or someone else is in immediate danger
• If we are required to do so by law or court order
• If a child or vulnerable adult is at risk of harm
In all such cases, we will only share the minimum necessary information with the appropriate
authority (e.g. police, social services). Wherever safe to do so, we will discuss this with you
first.
6. Who We Share Your Information With
We do not sell, rent, or trade your personal data. We share it only in these limited
circumstances:
• With therapists and staff within our organisation who are directly involved in your
support
• With external supervisors or professional consultants, under strict confidentiality
agreements
• With statutory authorities (police, social services) only under the safeguarding
circumstances described above
• With our IT and secure file storage providers, who are contractually bound to protect
your data
7. How We Keep Your Data Safe
We take the security of your information very seriously. Our measures include:
• Secure, password-protected systems for digital records
• Locked filing cabinets for any paper records
• Access restricted to authorised staff only
• Regular staff training on data protection and confidentiality
• Anonymisation of data wherever possible in reports or research
8. How Long We Keep Your Information
We retain personal records for as long as necessary to provide your support and meet our
legal obligations. Our standard retention periods are:
Active
participants
For the duration of your engagement with us
After support
ends
[4 years] — in line with safeguarding and professional guidance
Anonymised
records
May be retained longer for service evaluation and reporting
When records are no longer needed, paper files are securely shredded and digital files are
permanently deleted.
9. Your Rights
Under data protection law, you have the right to:
• Access a copy of the personal information we hold about you
• Ask us to correct any inaccurate or incomplete information
• Ask us to delete your information (where no legal obligation requires us to keep it)
• Object to or restrict how we use your information
• Withdraw your consent at any time (where consent is the legal basis)
• Receive your information in a portable format
To exercise any of these rights, please contact us at [email@yourorganisation.org]. We will
respond within 30 days.
You also have the right to lodge a complaint with the relevant supervisory authority:
UK Information Commissioner's Office (ICO) — ico.org.uk
Netherlands Autoriteit Persoonsgegevens (AP) — autoriteitpersoonsgegevens.nl
EU (other) Your national data protection authority — edpb.europa.eu/about-edpb/about-
edpb/members
10. Our Website
If you visit our website, we may collect standard analytics data (such as pages visited and
device type) to help us understand how the site is used. We do not use this data to identify
you personally. You can manage cookie preferences via your browser settings.
11. Changes to This Policy
We may update this policy from time to time. The most current version will always be
available from us on request and on our website. The date at the top of this document shows
when it was last revised.
12. Contact Us
If you have any questions, concerns, or requests relating to this privacy policy or how we
handle your information, please get in touch:
Organisation TGG Holistic Collective
Email hello@tggholisticcollective.co.uk
Phone 07577508920
This policy was prepared for TGG Holistic Collective and should be reviewed by a qualified legal professional
familiar with UK GDPR and/or EU GDPR before publishing