Who are Bywater Therapy?

Bywater Therapy (a trading name of Kudnett Limited) provides a referral and administrative service connecting clients with independent, self-employed therapists. We work with children, young people, and adults. This privacy notice explains how we collect and handle your personal data—including health information—to facilitate therapy bookings and outlines your rights under the Data Protection Act 2018, UK GDPR, and EU GDPR.

Controller for Personal Data

The data controller for your personal data when making enquiries or bookings is Kudnett Limited (trading as Bywater Therapy), registered in England and Wales under company number 13686814, incorporated on 18 October 2021, with its registered office at:

2 Millman Grove
Lawley Village
Telford
TF4 2PY
United Kingdom 

Once you are referred to a self-employed therapist, that therapist becomes the controller for any personal data they process during therapy.

Scope

This privacy notice applies to the data processing activities of Kudnett Limited (trading as Bywater Therapy) in relation to:

Clients (children, young people, and adults) enquiring about or booking therapy

Parents or guardians of under-18 clients

Website visitors

This policy does not cover how self-employed therapists use your data once referred; they are responsible for their own privacy policies.

What Personal Data Do We Collect?

We may collect and process:

Identity Data: Name, date of birth, gender

Contact Data: Email, phone, postal address

Health Data: Relevant medical or psychological information for referral

Background Information: Family, school, or work details (if needed)

Payment Data: Amount, method, and transaction references (no full card storage)

Usage Data: Website interactions

Technical Data: IP address, browser, device, and operating system

How We Collect Your Data

We collect your data via:

Website or email referral forms

Phone or video calls

Payment transactions

Website cookies

Legal Basis for Processing

We rely on:

Consent: Your explicit agreement for sharing data with therapists

Contract: To arrange therapy services and process referrals

Legal Obligation: To comply with legal and regulatory obligations

Legitimate Interests: To operate and improve our service

For special category data (e.g., health data), we rely on:

Explicit consent

Processing needed for healthcare referrals

Safeguarding needs, where relevant

How We Use Your Data

Your data is used to:

Facilitate enquiries and referrals to self-employed therapists

Manage bookings and take payments

Communicate pre-referral information

Share relevant data with assigned therapists

Improve our website and services

Comply with legal or safeguarding responsibilities

Sharing Your Data

We may share your data with:

Self-employed therapists, to whom you are referred (data required for therapy)

Payment processors, for booking payments

Professional advisers (legal/accountancy) under confidentiality

IT service providers, under secure terms

Safeguarding or law enforcement agencies, if legally required

Self-employed therapists manage and store your data separately; you should review their privacy notices after referral.

Data Retention

Referral and booking data: retained by Kudnett Limited for up to 7 years

Health data: retained only as long as necessary for referrals unless legally required

Unsuccessful enquiries: deleted within 6 months

Self-employed therapists follow separate retention policies.

Data Security

We use:

Encrypted, password-protected digital systems

Access controls and confidentiality agreements

Secure partnerships with service providers

Your Rights

You may request to:

Access, correct, or delete your personal data

Restrict processing

Data portability

Object to processing

Withdraw consent

Contact: [email protected]

Cookies & Analytics

We use:

Essential cookies for functionality

Analytics cookies to monitor and improve our site

You can control cookie preferences via your browser.

Safeguarding

If we believe there is a risk to you or others, we may share information with emergency or safeguarding services. We aim to inform you unless it would increase risk.

Changes to This Privacy Policy

We may update this policy to reflect changes in legislation or business practice. The latest version is available on our website. Significant changes will be communicated directly where appropriate.

Last updated: 8th October 2025

Contact Us

When contacting us, please use:

Kudnett Limited (trading as Bywater Therapy)
Email: [email protected]
Registered Office: 2 Millman Grove, Lawley Village, Telford, TF4 2PY, United Kingdom

For concerns about data handling, you may lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.