Committed to making a difference, clinical specialist occupational therapists

Privacy Notice

Last updated Oct. 2026

Data controller: Nature Hub OT
Contact: info@naturehubot.co.uk, Unit 1 Baggeridge Village Craft & Enterprise Centre, Brick Kiln Way, Baggeridge Village, Sedgley, DY3 4BB

Who we are
Nature Hub OT provides specialist occupational therapy services, sensory integration assessment and intervention, school visits and training, independent expert OT assessments for legal matters, and mental capacity and Court of Protection-related services. Where Nature Hub OT determines why and how personal data is used, it acts as a data controller. For some school or partnership arrangements, responsibilities must be confirmed case by case.

What information we collect
We may receive names, contact details, referral and appointment details, communications, assessment findings, reports, health and disability information, education information and, where relevant, legal case information. Some information concerns children or other people needing additional support. Our website may also collect technical data through forms and cookies.

Why we use information
We use information to respond to enquiries; assess and provide services; arrange appointments and training; produce clinical or independent expert reports; communicate with appropriate referrers and professionals; manage contracts and payments; maintain records; meet legal and professional obligations; and protect people where safeguarding duties apply.

Legal grounds for using information
The lawful basis under UK GDPR Article 6 and, where health or other special-category information is involved, the relevant Article 9 condition will depend on the specific activity.
We only use personal information where we have a lawful basis to do so. The purposes for which we may process information include the following.

Purpose	Personal information used	Article 6 lawful basis	Article 9 condition where health data is involved
Receiving and assessing an occupational therapy referral	Identity, contact, referral and health information	Article 6(1)(e) public task, where we are providing a commissioned public service; otherwise Article 6(1)(b) contract or Article 6(1)(f) legitimate interests, depending on the arrangement	Article 9(2)(h) health or social care
Providing occupational therapy assessment, treatment, advice or recommendations	Identity, health, functional, care and relevant social information	Article 6(1)(e) public task where applicable to the commissioned service; otherwise Article 6(1)(b) contract	Article 9(2)(h) health or social care
Preparing clinical, occupational therapy and professional reports	Clinical and assessment information	Article 6(1)(e) public task where applicable; otherwise Article 6(1)(b) contract	Article 9(2)(h) health or social care
Communicating with parents, carers and other professionals involved in care	Contact, clinical and relevant care information	Article 6(1)(e) public task, 6(1)(b) contract or 6(1)(f) legitimate interests, depending on the service arrangement	Article 9(2)(h) health or social care
Sharing relevant information with referrers, commissioners and professionals involved in care	Relevant clinical, functional and administrative information	Article 6(1)(e) public task where applicable; otherwise Article 6(1)(b) or 6(1)(f) as appropriate	Article 9(2)(h) health or social care
Safeguarding children and adults at risk	Relevant health, care, safeguarding and other information	Article 6(1)(c) legal obligation and/or 6(1)(e)public task, where applicable	Article 9(2)(g)substantial public interest or 9(2)(h) health or social care, depending on the circumstances
Managing appointments and service administration	Contact, appointment and service information	Article 6(1)(b) contract or 6(1)(f) legitimate interests	Usually not required; where the information reveals health information, Article 9(2)(h) may apply
Billing, invoicing and financial administration	Contact, service and payment information	Article 6(1)(b) contract and/or Article 6(1)(c) legal obligation	Normally not required unless health information is involved
Meeting professional, regulatory and legal requirements	Clinical and administrative records	Article 6(1)(c) legal obligation and/or Article 6(1)(f) legitimate interests	Article 9(2)(h) where necessary for health or social care; another Article 9 condition may apply where required
Managing complaints, incidents and legal claims	Relevant clinical and administrative information	Article 6(1)(c) and/or Article 6(1)(f)	Article 9(2)(f) legal claims and/orArticle 9(2)(h) where applicable
Website enquiries and requests for information	Name, contact details and enquiry information	Article 6(1)(f) legitimate interests or Article 6(1)(b) contract, where applicable	Usually not required; if health information is voluntarily provided and needs to be processed, Article 9(2)(h) may apply
Website security, technical administration and preventing misuse	IP address, device and technical information	Article 6(1)(f) legitimate interests	Not normally applicable
Sending optional marketing communications	Name and contact details	Article 6(1)(a) consent or another lawful basis where permitted by applicable electronic marketing rules	Not normally applicable

We will select the lawful basis that applies to the actual service and circumstances rather than automatically relying on consent.

In particular, consent to receive healthcare is not the same thing as the UK GDPR lawful basis for processing personal information. The ICO specifically recognises that healthcare providers may rely on other lawful bases, such as public task or contract, together with Article 9(2)(h) for health or social care information.

We do not assume consent is the lawful basis for every clinical activity.

Who we share information with
We share only information that is appropriate and necessary, which may include relevant schools, families or carers where lawful, instructed associates, healthcare professionals, solicitors, courts, commissioners, IT service providers and public authorities. Specific roles and agreements for Experts at Hand partners, schools and associates must be confirmed. We do not sell personal information.

How information is kept secure 
Nature Hub OT reports using iCloud and Qunote for clinical records, Egress and password-protected email attachments for confidential exchanges, and receiving some school communications through Mimecast. Access is primarily held by the principal clinician; associates receive limited information for their work.

How long we keep information
We retain personal information only for as long as it is necessary for the purpose for which it was collected and to meet our legal, professional, contractual and regulatory obligations.  Your rights Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to use of your information and, in some cases, data portability. Contact learningdisabilityotconsultant@gmail.com to make a request. You can complain to the Information Commissioner’s Office (ICO).

Cookies and website technology
The following table should be read alongside the cookie-consent settings presented on the
website.

Name	Value	Type	Duration
__Host-stackprotect_state	v2.1787921851.5e403befb604a8b3237cd54311a4e2a7.cfpswx. 0ba0c0dfdcad683c082cb47ef3da0ecf	Necessary	2026-08-28T13:17:30.821Z
et-pb-recent-items-colors	rgba(0%2C127%2C224%2C0.76)	Functional	2027-10-01T13:47:52.260Z
wordpress_test_cookie	WP%20Cookie%20check	Functional	Session
wp_lang	en_GB	Functional	Session
_wsm_id_1_24bf	f593c20159904cee.1787820387.4.17879 21878.1787909958	Functional	2027-09-24T08:46:27.000Z
_wsm_ref_1_24bf	%5B%22%22%2C%22%22%2C1787918 133%2C%22https %3A%2F%2Fwww.google.com%2F%22%5D	Functional	2027-02-26T23:55:33.000Z
_wsm_ses_1_24bf	*	Functional	2026-08-28T13:27:58.000Z
cookieyes-consent	consentid:WjlLU1RKUGJ0bkdtbm5BeGM1TW1HSDdrSE h4ZVZpVUc,consent:yes,action:yes,necessary:yes,functional: yes,analytics:yes,performance:yes,advertisement:yes	Functional	2027-08-27T08:46:29.000Z

International transfers
Where personal information is transferred outside the UK, we will ensure that the transfer is lawful and that appropriate safeguards are in place in accordance with UK data protection legislation.

Changes and contact 
We will review this notice when our services or systems change. Privacy questions: info@naturehubot.co.uk

Effective date: 19/10/2026.