Privacy Policy

Recover Speech is a sole-trader private speech and language therapy practice operated by Louise Lim. We provide speech and language therapy services to adults online and in person across East Anglia.

Louise is the data controller for all personal information collected through this website and in connection with therapy services.

Contact: hello@recommunicatespeech.co.uk · 07841 522 601

ICO Registration Number: ZA519623

We may collect and hold the following categories of personal information:

• Contact details: name, email address, phone number
• Health and clinical information: details about your condition, medical history, therapy goals, and session notes. This is special category data under UK GDPR.
• Communication records: emails, WhatsApp messages, and phone call notes relating to your enquiry or care
• Payment information: records of invoices and payments (we do not store card details)
• Emergency contact details, where provided

We do not use website contact forms. All enquiries are made directly by email, phone, or WhatsApp.

We rely on the following lawful bases under UK GDPR:

• Performance of a contract: to deliver speech therapy services you have engaged us for
• Legal obligation: to comply with HMRC tax requirements and safeguarding duties
• Legitimate interests: to respond to enquiries and maintain records necessary for professional practice

For special category health data, we rely on Article 9(2)(h) of UK GDPR, which covers processing by a health professional subject to a legal duty of confidentiality for the purposes of providing healthcare.

Your personal information is used only for the following purposes:

• Delivering speech and language therapy and managing your care
• Maintaining professional clinical records as required by HCPC standards
• Processing payments and keeping financial records for tax purposes
• Communicating with you about appointments, progress, and recommendations
• Fulfilling safeguarding obligations where required by law

We do not use your information for marketing, and we do not sell or share your data with any third party for commercial purposes.

Your information is kept strictly confidential. We will only share it in the following limited circumstances:

• With your written consent. For example, to share a report with your GP or another healthcare professional.
• Professional supervision. Session content may be discussed with a clinical supervisor for professional development purposes. Supervisors are bound by the same duty of confidentiality.
• Legal obligation. HMRC or other regulatory authorities where required by law.
• Safeguarding. If there is reasonable cause to believe that a child, vulnerable adult, or another person is at risk of serious harm, we are legally and professionally required to report this to the relevant authorities without your consent. We will tell you when this happens unless doing so would put someone at greater risk.
• Court order. If compelled to disclose records by a court.

Sessions delivered via Zoom or FaceTime involve data processing by those platforms. Zoom processes data in line with its own privacy policy and holds appropriate data transfer safeguards. FaceTime uses end-to-end encryption by default.

You are responsible for ensuring your environment is private during online sessions. Session notes are taken and stored securely by us; sessions are not recorded unless you have given explicit written consent in advance.

We take reasonable steps to protect your information, including:

• Storing clinical records in encrypted, password-protected files
• Using password-protected devices
• Using secure, encrypted communication channels
• Limiting access to your data to Louise only

Clinical records and associated personal data are retained for 7 years after the end of therapy. For clients who were under 18 at the time of treatment, records are retained until their 25th birthday or 7 years after treatment ends, whichever is later.

This retention period reflects HCPC professional standards, the limitation period for professional complaints, and our insurance obligations.

After the retention period, records are securely deleted or destroyed.

Financial records are kept for 6 years in line with HMRC requirements.

Under UK GDPR you have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: ask us to correct inaccurate data
• Erasure: ask us to delete your data, subject to our legal and professional retention obligations
• Restriction: ask us to limit how we use your data in certain circumstances
• Portability: receive your data in a portable format
• Objection: object to processing based on legitimate interests

To exercise any of these rights, contact Louise at hello@recommunicatespeech.co.uk. We will respond within 30 days.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113.

This website may use essential cookies required for it to function. We do not currently use analytics or advertising cookies. If this changes, this policy will be updated.

We may update this policy from time to time. The current version is always available at this page. Significant changes will be communicated to active clients.