Privacy

It is Charlotte Frost’s intention to ensure that any data you provide is managed respectfully, kept secure and only used for the purposes for which it has been provided.


  1. If you contact Charlotte Frost via her website, website, social media, telephone or email, the information she may collect includes:
    1. Name
    2. Email address
    3. Telephone number
    4. Any other relevant information
  2. Via Client Intake forms and/or initial consultation the information Charlotte Frost will collect includes:
    1. Name
    2. Email Address
    3. Address
    4. Telephone number
    5. Emergency contact
    6. Lifestyle information
    7. Medical history
    8. Mental health history
    9. Presenting issue history
    10. Payment details
    11. Any other relevant information
  3. During the course of treatment Charlotte Frost may make anonymised notes with the sole purpose of supporting the treatment process.


Charlotte Frost will collect this information in order to proceed with treatment, timely communication, and payment. Charlotte Frost will store this information securely. Paper-based information will be locked away between sessions. Digital-based information will be password protected. Charlotte Frost will undertake a review of all data protection policies and procedures annually to ensure methods are up to date and GDPR compliant.


Charlotte Frost is bound by the CNHC Data Protection Guidance which stipulates that she must hold your data for 8 years after your final session. Unless you are a child, in which case she must hold your data until your 25th birthday, unless you are 17 when treatment ends and then she must keep it until your 26th birthday. Therefore, all records will be deleted in the January after the above retention scales.


Under certain circumstances, you have rights under data protection laws in relation to your personal data.


These include the right to:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Right to withdraw consent.


You can see more about these rights at the ICO website:


If you wish to exercise any of the rights set out above, please contact Charlotte Frost.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, Charlotte Frost may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, Charlotte Frost may refuse to comply with your request in these circumstances.

Charlotte Frost may need to request specific information from you to help confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. Charlotte Frost may also contact you to ask you for further information in relation to your request to speed up our response.


Charlotte Frost aims to respond to all legitimate requests within one month. Occasionally it may take longer than a month if your request is particularly complex or you have made a number of requests. In this case,

Charlotte Frost will notify you and keep you updated.


Charlotte Frost, the data processor, will be fully compliant with the GDPR requirements in using data for administration, appointment making and accounts.