privacy policy

ShallweSay Privacy Policy

ShallWeSay is located in Flitwick, Bedford, United Kingdom. Our website address is: https://shallwesay.co.uk. ShallWeSay assumes the function of data controller and ensures the compliance of General Data Protection Regulation (GDPR) within the business. ShallWeSay is owned and directed by Chloe Sangwa, speech and language therapist. ShallWeSay works in accordance with professional guidelines from the Royal College of Speech and Language Therapists and The Health and Care Professionals Council. ShallWeSay also abides by the laws of UK GDPR.

1. Information we collect, including the following:

Personal information (e.g. name, age, gender, address, languages spoken)
Educational information (e.g. name of school, year level, educational attainment)
Health information (e.g. diagnoses)
Speech, language and communication needs information.

2. Where we get our information:

From parents (e.g. through emails, forms, questionnaires, interviews, reports, conversations)
From the child (e.g school and therapy observations, formal and informal assessments, in conversation during sessions)
From the school (e.g. emails, forms, questionnaires, interviews, school reports)
From other professionals such as therapists and doctors

3. How we use the information we collect:

For contact, communication and billing purposes
To determine appropriate outcomes and targets
To identify appropriate therapy resources and activities
To make further referrals
To identify speech, language and communication needs and to make a diagnosis where appropriate

4. Information we share:

Information but not names will be shared with the therapist’s clinical supervisor who is also RCSLT accredited and who I meet with regularly to reflect on my practice. Information may be shared with third parties where a parent gives consent, for example assessment reports, observations or letters shared with

Your child’s school
Insurance provider
Other therapists working with your child
Doctors and healthcare workers

5. How and when consent is obtained:

Before the first session, a Therapy Agreement will be shared with you. In addition, if sharing information with third parties as outlined above, the therapist will request written consent from you.

6. How we protect your data:

Information will be kept securely and confidentially on electronic platforms complying with GDPR. Documents will be password protected. Emails will be sent securely using encrypted email. Sessions will be conducted over a secure platform such as Zoom.

7. Protecting your rights to data:

You have rights relating to the information we hold to verify the accuracy or to ask for them to be supplemented, deleted, updates or corrected. You have the right to request a copy of the information that I hold about you. If you would like a copy of some or all of your personal information, please email via contact@shallwesay.co.uk. Information will be provided to you within 30 days. We want to make sure that your information is accurate and up to date. You may ask me to correct or remove information you think is inaccurate. You have the right to request the transfer of your data to another individual or company.

8. How long we keep your information for:

Your information is kept for the time necessary to provide the therapy services requested. To comply with legal obligations placed upon me by my insurers, I will hold records for a child under 13 years of age for 7 years after they reach the age of majority (18). After this date, all data will be securely deleted.

9. Changes to the GDPR agreement:

You will be notified of any changes made to this privacy policy in the future.