Privacy policy

Occupational Therapy Services for PMOS

Last updated: May 2026

This Privacy Policy explains how Sensory Aurora collects, uses, stores, and protects your personal data. We are committed to handling your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our services include occupational therapy for PMOS and specialist pelvic health support. Given the sensitive nature of health information, we apply the highest standards of data protection and confidentiality.

1. Data Controller

Sensory Aurora the data controller for personal data collected through this website and our services.

Contact: sensoryaurora@gmail.com

Address: Suite 19.6, Exhibition House, Addison Bridge Place, London, W14 8XP

ICO Registration Number: ZC103137

2. What Data We Collect

2.1 Information You Provide

When you use our website, book appointments, or engage with our services, we may collect:

• Full name and contact details (email address, phone number, postal address)

• Date of birth

• Health and medical information relevant to your PMOS and occupational therapy needs, including pelvic health information such as pelvic floor function, pelvic pain, and bladder or bowel symptoms

• GP and other healthcare professionals’ details

• Emergency contact information

• Payment information (processed securely — we do not store card details)

• Communications you send to us

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and browser type

• Pages visited and time spent on the site

• Referring website

• Cookie data (see Section 9 — Cookies)

3. Special Category Data

Health information is classified as 'special category data' under UK GDPR and receives a higher level of protection. This includes pelvic health information, which we recognise as particularly sensitive. We collect and process health data only where it is necessary to provide our occupational therapy services, and we do so on the basis of:

• Your explicit consent

• The provision of health or social care services (Article 9(2)(h) UK GDPR)

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: to fulfil our obligations when you book and receive services

• Legal obligation: to comply with applicable laws and professional regulations

• Legitimate interests: to improve our services and communicate with you about your care

• Consent: where you have given clear consent (e.g. for marketing communications)

5. How We Use Your Data

We use your personal data to:

• Book and manage your appointments

• Deliver occupational therapy sessions (online and in-person)

• Maintain clinical records as required by our professional obligations

• Process payments

• Communicate with you about your care

• Comply with our legal and professional obligations (including HCPC requirements)

• Improve our website and services

• Send you service updates or relevant information (where you have consented)

6. How We Share Your Data

We do not sell or rent your personal data. We may share it in the following limited circumstances:

• With other healthcare professionals involved in your care, with your consent

• With our clinical supervisor (under confidentiality obligations)

• With payment processors to handle transactions

• With IT service providers who support our systems (under data processing agreements)

• Where required by law, court order, or regulatory authority

• Where disclosure is necessary to protect your safety or the safety of others

7. Data Retention

We retain clinical records for a minimum of 8 years from the date of your last appointment (or until age 25 for records relating to children), in line with HCPC guidance and NHS retention schedules.

Other personal data (such as enquiries and marketing preferences) is retained for no longer than 3 years from your last contact with us, or until you withdraw consent.

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you

• Right to rectification: to request correction of inaccurate data

• Right to erasure: to request deletion of your data in certain circumstances

• Right to restriction: to request we limit how we use your data

• Right to data portability: to receive your data in a structured, machine-readable format

• Right to object: to object to processing based on legitimate interests

• Right to withdraw consent: at any time where processing is based on consent

To exercise any of these rights, please contact us at sensoryaurora@gmail.com. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

9. Cookies

Our website uses cookies to improve your experience. Cookies are small text files stored on your device. We use:

• Essential cookies: necessary for the website to function correctly

• Analytics cookies: to understand how visitors use our site (e.g. Google Analytics)

• Preference cookies: to remember your settings and preferences

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect website functionality.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include:

• Encrypted storage of clinical records

• Secure, password-protected systems

• Use of end-to-end encrypted or HCPC-approved platforms for online sessions

• Staff training on data protection obligations

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

11. International Transfers

We aim to keep all data within the UK and European Economic Area (EEA). If any data is transferred outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website, with the date updated. We will notify you of significant changes where we hold your contact details.

For any privacy-related questions or to exercise your rights, please contact: sensoryaurora@gmail.com

Information Commissioner's Office: www.ico.org.uk | 0303 123 1113