Privacy Policy
1. Introduction
1.1 Welcome to ShoutAndScream.org (hereinafter referred to as “the Service”, “we”, “us”, or “our”). This Privacy Policy explains how we collect, use, protect, and handle your personal information when you use our premium rate mental health support telephone service.
1.2 We are committed to protecting your privacy and ensuring the security of your personal data in full compliance with the:
– UK Data Protection Act 2018
– UK General Data Protection Regulation (UK GDPR)
– Privacy and Electronic Communications Regulations (PECR)
2. Data Controller Information
2.1 The data controller for this service is:
ShoutAndScream.org
[Complete Registered Address]
Data Protection Registration Number: [Insert ICO Registration Number]
3. Types of Personal Information We Collect
3.1 We may collect the following categories of personal information:
– Contact details (name, telephone number)
– Age and demographic information
– Call duration and connection details
– Mental health-related information shared during support calls
– Technical data (device information, call metadata)
3.2 Sensitive Personal Data
We acknowledge that mental health information is classified as special category data requiring enhanced protection. We handle such information with the utmost confidentiality and care.
4. Purpose of Data Processing
4.1 We collect and process personal data for the following purposes:
– Providing mental health telephone support services
– Ensuring service quality and safety
– Maintaining accurate records for clinical supervision
– Compliance with legal and regulatory requirements
– Billing and payment processing
4.2 Legal Basis for Processing
Our legal grounds for processing your data include:
– Explicit consent
– Legitimate interests in providing mental health support
– Compliance with legal obligations
– Protecting vital interests in cases of potential harm
5. Data Collection Methods
5.1 We collect personal data through:
– Direct interactions during telephone support calls
– Automated telephone system logs
– User-provided information
– Telecommunications provider records
6. Data Sharing and Disclosure
6.1 We may share your personal data with:
– Registered mental health professionals
– Clinical supervisors
– Regulatory bodies (Ofcom, ICO)
– Law enforcement (in cases of legal requirement or potential harm)
6.2 We do NOT:
– Sell personal data to third parties
– Use data for marketing purposes
– Share data without lawful basis or your consent
7. Data Retention
7.1 We retain personal data:
– For the minimum time necessary for our stated purposes
– In accordance with professional mental health record-keeping guidelines
– Typically for a maximum of 7 years after last service interaction
7.2 Call records and metadata may be retained for:
– Billing verification
– Quality assurance
– Potential legal or regulatory requirements
8. User Rights
8.1 You have the following rights:
– Right to access your personal data
– Right to request data correction
– Right to request data deletion
– Right to restrict data processing
– Right to data portability
– Right to withdraw consent
– Right to lodge a complaint with the Information Commissioner’s Office (ICO)
8.2 To exercise these rights, contact:
– Email: dataprotection@shoutandscream.org
– Postal Address: [Complete Address]
9. Data Security Measures
9.1 We implement robust security controls including:
– Encrypted data storage
– Secure access protocols
– Regular security audits
– Staff training on data protection
– Anonymisation and pseudonymisation techniques
– Restricted access to sensitive information
10. Confidentiality Limitations
10.1 While we maintain strict confidentiality, we may disclose information without consent in circumstances involving:
– Imminent risk of harm to self or others
– Legal reporting requirements
– Child protection concerns
– Prevention of serious crime
11. Cookies and Tracking
11.1 Our website uses minimal tracking technologies:
– Essential cookies for website functionality
– No third-party tracking or advertising cookies
– IP address logging for security purposes
12. International Data Transfers
12.1 All data is processed and stored within the United Kingdom, ensuring compliance with UK data protection regulations.
13. Changes to Privacy Policy
13.1 We may update this policy periodically:
– Changes will be published on our website
– Significant changes will be communicated directly to users
– Continued use of service implies acceptance of updated policy
14. Contact for Data Protection Queries
14.1 Data Protection Officer
Email: dataprotection@shoutandscream.org
[Complete Contact Address]
15. Complaint Mechanism
15.1 If you believe your data protection rights have been infringed:
– Contact our Data Protection Officer
– Lodge a complaint with the Information Commissioner’s Office
– Website: www.ico.org.uk
– Telephone: 0303 123 1113
Regulatory Compliance Statement:
ShoutAndScream.org is committed to maintaining the highest standards of data protection and privacy in accordance with UK legislation.