GDPR Compliance

Last Updated: August 2026

Your Data Protection Rights

Under the General Data Protection Regulation (GDPR), you have specific rights regarding your personal data. We are committed to upholding these rights and ensuring transparent data processing practices.

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies if your request is manifestly unfounded or excessive.

Right to Rectification

You have the right to request correction of any information you believe is inaccurate or incomplete.

Right to Erasure

You have the right to request deletion of your personal data under certain conditions. Please note that professional practice standards may require us to retain certain records for specific periods.

Right to Restrict Processing

You have the right to request restriction of processing your personal data under certain conditions, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to our processing of your personal data under certain conditions.

Legal Basis for Processing

We process personal data based on:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you
• Legal obligation: Processing is necessary for compliance with the law
• Legitimate interests: Processing is necessary for our legitimate interests or those of a third party

Data Controller

smaltaspar acts as the data controller for personal information collected through our website and services.

Contact address: 27 Parkview Gardens, Kensington, London W8 4JB, United Kingdom

Email: [email protected]

Data Processing Activities

We process personal data for the following purposes:

• Providing psychological support and coaching services
• Managing client relationships and communications
• Maintaining professional records as required by practice standards
• Improving our services and website functionality
• Complying with legal and regulatory obligations

Data Security Measures

We implement appropriate technical and organizational measures including:

• Encryption of sensitive data
• Regular security assessments
• Access controls and authentication
• Staff training on data protection
• Incident response procedures

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

International Data Transfers

We do not routinely transfer personal data outside the European Economic Area. If such transfer becomes necessary, we will ensure appropriate safeguards are in place.

Automated Decision-Making

We do not use automated decision-making or profiling in our service delivery.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.