GDPR and Your Data Rights

Last updated: 29 August 2026

This page summarises your rights under UK data protection law. My Privacy Notice provides fuller information about what Therapy with Rick collects, why it is used, where it is processed and how long it is retained.

Why this matters

Therapy involves personal and sometimes sensitive information. UK data protection law gives you rights over your personal information and places responsibilities on me as the data controller. This means your information should be handled lawfully, fairly, securely, and only where there is a clear reason to use it.

Your data-protection rights

Depending on the circumstances, you may have the right to:

  • Ask for access to personal information I hold about you.

  • Ask for inaccurate or incomplete information to be corrected.

  • Ask for information to be erased.

  • Ask for processing to be restricted.

  • Object to certain uses of your information.

  • Receive information you provided in a structured, commonly used format where the right to data portability applies.

  • Withdraw consent where consent is the lawful basis being used.

  • Complain about how your information has been handled.

These rights are not absolute. A request may be limited where information must be retained because of legal, safeguarding, professional, clinical or third-party considerations.

How website enquiries are processed

Information submitted through the website contact form is processed by Squarespace, delivered to my designated Proton Mail inbox and stored temporarily within Squarespace Contacts.

Copies held in Squarespace Contacts are deleted within 90 days of submission. Information may be deleted earlier when no longer needed. If an enquiry leads to therapy, information that is relevant to the work may instead form part of the client record.

Submitting the form does not subscribe you to marketing emails or a mailing list.

Therapy records

Therapy notes and other client records are stored separately from this website within my private-practice record system. Access is restricted and records are retained according to the periods described in my Privacy Notice

Some information connected with therapy may be classified as special category data because it concerns matters such as mental health, physical health, relationships, sexuality or other sensitive aspects of a person’s life.

Website security and analytics

Squarespace processes information needed to host and operate this website.

Google reCAPTCHA is enabled on the contact form to help distinguish genuine submissions from automated spam. It may process limited technical information about a visitor’s browser, device, network and interaction with the website.

Google Analytics may process technical information about website use where analytics has been enabled through the website’s cookie choices. Further information is available in the Cookie Policy

Some website and communications providers may process information outside the UK. Where UK international-transfer rules apply, appropriate legal safeguards must be used. Further details are provided in the Privacy Notice

Making a request

You can make a data-protection request through the Contact page

I may need to confirm your identity before disclosing or changing personal information. I will normally respond within one month, although the law permits additional time in some complex cases. If more time is needed, I will explain why.

Raising a concern

If you are concerned about how your information has been handled, please contact me first so that I can review the matter.

You also have the right to raise a concern with the Information Commissioner’s Office:

ico.org.uk

More information

For more detail, please read:

Last updated: 29 August 2026

FAQ: GDPR

  • GDPR stands for General Data Protection Regulation. In the UK, it forms part of the law that protects personal information and gives people rights over how their data is used.

  • Squarespace processes the information entered into the form, delivers it to my ProtonMail inbox and temporarily stores a copy within Squarespace Contacts. The Squarespace copy is deleted within 90 days.

  • No. Submitting a therapy, media or professional enquiry does not subscribe you to marketing emails or a newsletter.

  • Therapy notes and client records are stored separately from this website within my private-practice record system.

  • Depending on the circumstances, you may ask to access, correct, erase, restrict or receive a copy of your personal information. You may also object to some processing, withdraw consent where applicable and raise a complaint.

  • You can contact me through the Contact page. You may also raise a concern with the Information Commissioner’s Office at ico.org.uk

Complete FAQ