Privacy Policy
Last updated: [date will be filled at publication]
This Privacy Policy explains how the Dr. Jonathan Kushnir Bedwetting & Sleep Clinic (“the Clinic”, “we”, “us”) collects, uses and protects information you provide through this website (enuresis.co.uk). It is written to be compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Data controller: Dr. Jonathan Kushnir, clinical psychologist (HCPC registration PYL042430).
Contact: drjkushnir@gmail.com
What information we collect
- Free questionnaire responses — including details about your child’s bedwetting, sleep, bowel habits and any psychological factors. Names are not required; only an email address or phone number for reply.
- Contact form submissions — your name (optional), email address, and message content.
- Booking information — when you book through Calendly, your name, email address and chosen time slot. Calendly is the data processor for this; see Calendly’s own privacy policy.
- Online progress chart entries (clients only) — daily entries about your child’s nights during treatment, plus your remarks.
- Website analytics — anonymised usage statistics via Google Analytics 4 (page views, approximate location, device type). No individual visitor is personally identifiable from this data.
How we use your information
- To respond to questionnaire submissions and contact form messages
- To deliver clinical assessment and treatment if you become a client
- To improve the website and understand how visitors use it (anonymised analytics only)
- To meet our professional record-keeping obligations as required by HCPC and clinical practice standards
Lawful basis for processing
- Consent — when you submit the questionnaire, contact form, or book an assessment, you are providing explicit consent for that purpose.
- Legitimate interest — for anonymised website analytics.
- Provision of healthcare — for clinical records of clients in active treatment, as permitted under UK GDPR Article 9(2)(h).
How long we keep your information
- Questionnaire and contact form responses (no treatment commenced): deleted within 12 months.
- Clinical records of clients in treatment: retained in line with HCPC professional standards (typically 7 years after last contact for adult clients, or until the child reaches age 25 for paediatric clients).
- Anonymised analytics data: retained per Google Analytics standard retention.
Who we share your information with
We do not sell or share personal information with third parties for marketing purposes. We use the following data processors who handle information on our behalf, under appropriate contracts:
- Website hosting — GoDaddy (or successor host)
- Booking — Calendly
- Email — your messages are received via the email provider linked to enuresis.co.uk
- Analytics — Google Analytics (anonymised)
- Form storage — WPForms (data held within the website’s own database)
We do not share your clinical information with any other party without your explicit written consent, except where required by law (for example, safeguarding concerns).
Your rights
Under UK GDPR you have the right to:
- Access the personal information we hold about you
- Have inaccurate information corrected
- Have your information deleted (subject to professional record-keeping obligations for clinical records)
- Object to processing or withdraw consent
- Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk
To exercise any of these rights, contact drjkushnir@gmail.com.
Cookies
This website uses essential cookies for basic functionality and, with your consent, anonymised analytics cookies. A cookie banner is displayed on first visit so you can accept or decline non-essential cookies.
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top of this page will reflect any change.
Progress Chart (clinical platform at /chart/)
Families in active treatment use the secure progress chart at enuresis.co.uk/chart/. The chart processes special-category health data under UK GDPR Article 9(2)(h) (provision of health care).
What is stored on the chart
- Pseudonymous patient number (e.g. P-001) — no child names are stored on the chart
- Parent email address (used solely for authentication and notifications)
- Daily entries: dryness status, time of any wetting event, and free-text remarks you choose to add
- Child’s age at the start of treatment and the treatment start date
- Therapist replies (sent by Dr. Kushnir)
- Audit log of every reply sent and significant access event
Where the data is stored
Data is stored on managed Supabase infrastructure with AES-256 encryption at rest and TLS in transit. Row-Level Security ensures that only you and Dr. Kushnir can read your records — no other patient, no Supabase staff in the normal course of business, and no third party.
Retention
Chart entries are retained for the duration of treatment plus 7 years (in line with the NHS clinical-records standard for paediatric records). After this period the records are deleted. You may request deletion at any time by emailing yonikushnir@gmail.com.
Your rights
- Right of access — export of all your chart data
- Right to rectification — correction of inaccurate entries
- Right to erasure — deletion of your data (subject to clinical-records retention obligations)
- Right to restrict processing
- Right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk