Care begins with trust.

1. Who we are

Bloom & Grow Child & Family Therapy operates this website and is responsible for the personal information collected through its forms. Our centre is at Kaka House, Gate 2, Maua Close, off Muthithi Road, Westlands, opposite Mövenpick, Nairobi.

This policy covers browsing our website, contacting us, requesting an appointment, submitting an intake form and offering a testimonial. It also explains how we use those submissions to prepare for care. Your therapist will discuss any further information or permissions needed during care.

2. Information we collect

• Enquiries and bookings: your name, contact details, chosen service, preferred visit time, your child’s age range and the information you choose to include in your message.
• Child intake: the child’s name and date of birth, your relationship to the child, contact preferences, your concerns and goals, and optional information about development, health, medicines, safety needs, daily activities and previous support.
• Consent: the declarations you make on the intake form, the submission time, and the form and privacy policy versions in effect when you submit.
• Testimonials: the story, contact details and preferred public attribution you provide. Stories are reviewed before publication.
• Technical information: information needed to deliver and protect the service, such as request times, IP addresses, browser details and error or security events recorded by our hosting systems.

Required fields are marked on the form. Without the essential information and consent, we cannot process an online intake. Optional answers may be left blank. Call us if you would prefer to complete intake with the team. Please avoid national ID numbers, payment credentials and unrelated information about other people.

3. How we use information

We use your submissions to respond to questions, review requests, arrange visits, understand your child’s needs, prepare for assessment and keep an appropriate record of our communications. We use technical information to operate the website and investigate errors or misuse.

Our approach is guided by Kenya’s Data Protection Act, 2019. We seek your consent for the information submitted through the child intake form. Other processing may be necessary to arrange or provide requested services, meet a legal obligation, or protect legitimate service and security interests. Sensitive health information requires an applicable legal basis and additional safeguards.

The intake form does not sign you up for marketing. We do not sell personal information or use intake answers for advertising. We do not use this form to make an automated diagnosis, decide eligibility for therapy or prescribe treatment.

4. Children and consent

The intake form is for a parent or legal guardian of a child under 18. We ask you to confirm your authority and may verify it before discussing the child or linking a submission to an existing family record. We aim to involve children in conversations about their information in a way suited to their age and understanding.

Consent to submit intake information is separate from consent to assessment or treatment. Sharing with a school or outside professional, photography, research and public testimonials require a separate permission or another lawful basis. Completing intake does not give those permissions.

You can withdraw consent by contacting us. This does not undo processing already carried out lawfully. We will explain what can be removed, what must be retained and whether withdrawing information affects the care we can provide.

5. Who may receive information

Submissions are available to authorised clinic staff who need them to coordinate enquiries and care. Intake forms are stored in the clinic’s staff inbox; they are not published on the website or automatically added to a parent account based on an email address.

Service providers supporting hosting, database operation and communications may process information for those services. We seek to limit access and information to what is needed. We may also disclose information where required by law or necessary to address a serious safeguarding concern.

If care coordination involves a school or another provider, we discuss the purpose and permission with you, unless a lawful exception applies. If information is processed outside Kenya, appropriate transfer safeguards and any required consent must apply. Contact us for information about the providers and locations relevant to your records.

6. Website technology and external services

The public website does not currently use advertising trackers or analytics cookies. Authenticated services may use essential session technologies to keep people signed in. Hosting systems may keep operational logs.

Intake answers are held in the current browser tab until you press “Send intake form”. The website does not save an intake draft in local or session storage. Closing or refreshing the page clears the draft. Your own browser or device may have autofill, backup or history features; take care when using a shared device.

Links to maps, WhatsApp or other external sites take you to services with their own privacy terms. Their operators may receive information when you open or use them. Website images may also be delivered through external image providers. The intake form sends its answers to Bloom & Grow’s website, rather than to the reference forms or a third-party form-filling service.

7. Security and retention

Staff access requires authentication. The intake endpoint validates submissions and does not include clinical answers in application error logs. We use HTTPS for the public website. No internet service can guarantee absolute security; contact us if you believe your information has been exposed.

We keep records for as long as needed for their purpose, including care continuity, handling an enquiry, legal or professional recordkeeping duties and resolving complaints. The appropriate period depends on the record, the child’s age, the care relationship and any outstanding obligation or dispute. Information should be deleted or anonymised when it is no longer needed. Ask us about retention or deletion of a particular record; some information may remain in protected backups until those backups are replaced.

8. Your choices and rights

Subject to applicable law, you can ask to access your information, correct inaccuracies, object to or restrict processing, request deletion or portability where available, and withdraw consent. A request concerning a child must also respect that child’s rights and your authority to act for them.

Contact us using the details below and describe what you need. We may ask for proportionate identity verification before acting, so that records are not disclosed to the wrong person. Please do not send identity documents or full medical histories in an initial email. We will explain any legal limitation that prevents us from fulfilling a request.

9. Contact and complaints

Use “Privacy request” in your email subject and include an intake or booking reference if you have one. You may also raise a concern with Kenya’s Office of the Data Protection Commissioner (ODPC).

We may update this policy as our services or practices change. The date above identifies the current version. Material new uses of information will be explained, and fresh consent sought where required.

Go to the occupational therapy intake form