Data Breach & Incident Response Procedure

Two Golden Words

At Two Golden Words, I take the protection of your personal information very seriously. I use secure systems and professional safeguards to keep your data safe at all times.

This policy explains what happens if there is ever a concern about data security.

How Your Data Is Protected

Your information is stored using secure, GDPR-compliant systems and protected through:

• Encrypted devices
• Password-protected accounts
• Secure clinical software (Smilenotes)
• Trusted booking, payment, and video platforms
• Limited access to client records

Only I have access to your personal and clinical information.

What Is a Data Breach?

A data breach may include:

• Loss of personal information
• Unauthorised access to records
• Accidental sharing of information
• Technical security failures

While breaches are rare, they are taken extremely seriously.

If a Data Breach Occurs

If a data security incident were ever to occur, I would:

• Act immediately to contain and resolve the issue
• Assess any potential risk to you or your child
• Report the incident to the Information Commissioner's Office (ICO) if required
• Inform you promptly if your data may be affected
• Take steps to prevent future incidents

Your safety and confidentiality are always the priority.

Your Rights

You have the right to ask questions about how your data is protected and to raise any concerns at any time.

If you are worried about data security, please contact:

nina@twogoldenwords.com

This policy is reviewed regularly to ensure it reflects best practice and current data protection guidance.