
Privacy Policy
​
Muddy Paths – Privacy Policy for Child & Adolescent Therapy
1. Who We Are: Muddy Paths is a private therapeutic practice specialising in the mental health and wellbeing of children and adolescents. Your therapist is registered with a recognised professional body (e.g., BACP, UKCP) and adheres to strict confidentiality and data protection standards.
2. What Information We Collect: About the Child or Young Person:- Full name, date of birth, gender
- Address and contact details (if appropriate)
- Medical history or mental health concerns
- School information
- Session notes and assessmentsAbout Parents/Guardians:- Name and relationship to the child
- Contact information
- Relevant family or social history
- Emergency contact detailsLegal and Safeguarding Information:- Any court orders or consent agreements
- Reports from other professionals (with consent)
3. Why We Collect This Data: We collect personal data in order to:
- Provide safe and effective therapy
- Understand your child’s needs
- Monitor progress and wellbeing
- Communicate with parents/guardians
- Fulfil legal and safeguarding obligations
4. How Your Data Is Stored: All information is stored securely, either digitally (with password protection and encryption) or in locked physical storage. Only authorised professionals working directly with your child have access to this information.
5. How Long We Keep Your Data: In accordance with professional guidelines and legal requirements:
- Child therapy records are kept until the child turns 25 (or 26 if they were 17 at the time of therapy).
 After this, records will be securely deleted or destroyed.
6. Sharing Information: Your information is kept strictly confidential, except in the following circumstances:
- With your explicit written consent (e.g., sharing with a GP, school, or social worker).
- If there is a serious risk of harm to your child or others.
- If we are legally required to share information (e.g., by a court order or safeguarding concern).
In such cases, we will always aim to discuss this with you first unless doing so would increase risk.
7. Your Rights Under the UK GDPR, you (and your child, if competent) have the right to:
- Access the personal data we hold
- Request corrections to inaccurate data
- Withdraw consent (where applicable)
- Request that data is erased (unless required by law to retain it)
- Lodge a complaint with the Information Commissioner’s Office (ICO)8. ContactIf you have any questions or concerns about how your or your child’s information is handled, please contact: