Privacy Policy for WAVO LTD

Last updated: 29th April 2025

WAVO LTD (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard the personal information you provide when you use our website and our therapy services.


1. Who We Are

WAVO LTD is a company registered in the United Kingdom. We provide therapeutic services, including counselling and workshops. For the purposes of the UK General Data Protection Regulation (UK GDPR), WAVO LTD is the “data controller” of your personal information.


2. What Personal Data We Collect

We may collect and process the following types of personal data:

  • Identity Data: Name, title, date of birth

  • Contact Data: Email address, telephone number, postal address

  • Health Data: Any information you share with us relevant to therapy (special category data)

  • Technical Data: IP address, browser type, operating system, and usage data from cookies

  • Communication Data: Your messages via contact forms or emails


3. How We Collect Your Data

We collect data when you:

  • Contact us via our website, phone, or email

  • Book or attend a therapy session

  • Subscribe to newsletters or updates

  • Visit our website (cookies may collect technical data)


4. Why We Use Your Data

We use your data to:

  • Provide and manage therapy services

  • Communicate with you regarding appointments and enquiries

  • Maintain records in line with ethical and legal obligations

  • Improve website performance and user experience

The lawful bases we rely on include:

  • Consent (e.g. for marketing or sensitive health data)

  • Contract (to provide therapy)

  • Legal obligation (to maintain records or report safeguarding concerns)

  • Legitimate interest (to improve our services)


5. Sharing Your Information

We do not sell or rent your information. We may share data with:

  • Professional advisers (e.g. supervisors or legal advisers) under confidentiality

  • IT or website service providers, for website hosting and email delivery

  • Authorities if required by law (e.g., safeguarding or legal requests)

All third parties are required to respect your data and comply with data protection law.


6. Data Security

We use appropriate technical and organisational measures to keep your data secure, including encrypted communications and secure storage systems. Only authorised personnel have access to your data.


7. Data Retention

We retain personal data only as long as necessary for the purposes collected:

  • Therapy records are typically retained for 7 years after the end of therapy, in line with professional guidelines.

  • Contact form enquiries may be retained for up to 1 year, unless converted into a client record.


8. Your Rights

You have rights under data protection law, including:

  • Right to access your data

  • Right to rectify inaccurate data

  • Right to request erasure (“right to be forgotten”)

  • Right to restrict or object to processing

  • Right to data portability

  • Right to withdraw consent (where processing is based on consent)

To exercise these rights, contact us at [Insert contact email].

If you believe your data rights have been violated, you can lodge a complaint with the UK Information Commissioner’s Office (ICO): www.ico.org.uk


9. Cookies

Our website may use cookies to enhance user experience and analyse traffic. You can manage cookie preferences in your browser settings. For more information, see our Cookie Policy [if you have one].


10. Updates to This Policy

We may update this Privacy Policy occasionally. We encourage you to review it regularly. Continued use of the website after changes indicates acceptance.


Contact Us
If you have any questions or concerns about this policy or your data, contact:

Contact us here