GDPR and Your Data Rights
Therapy with Rick handles personal information in line with UK data protection law, including UK GDPR and the Data Protection Act 2018.
This page gives a plain-English summary of your data rights. For full details about how personal information is collected, used, stored, and protected, please read the Privacy Notice
Why this matters
Therapy involves personal and sometimes sensitive information. UK data protection law gives you rights over your personal information and places responsibilities on me as the data controller. This means your information should be handled lawfully, fairly, securely, and only where there is a clear reason to use it.
What information may be processed
Depending on how you use the website or therapy service, I may process information such as:
Your name
Email address
Phone number
Information submitted through the contact form
Appointment and attendance information
Brief therapy notes
Payment and invoice information
Correspondence between us
Limited website and analytics data
Because this is a therapy practice, some information may include sensitive personal information, such as information about mental health, emotional wellbeing, relationships, family history, trauma, risk, sexuality, identity, or physical health. This type of information is handled with particular care.
Your rights under UK GDPR
You have the right to:
Ask for access to personal information I hold about you
Ask for inaccurate or incomplete information to be corrected
Ask for your information to be deleted in some circumstances
Ask for processing to be restricted in some circumstances
Object to how your information is used in some circumstances
Ask for a copy of your personal data in a portable format in some circumstances
Withdraw consent where consent is the lawful basis being used
Raise a concern or complaint about how your data has been handled
These rights are not absolute. In some situations, I may need to keep or withhold information because of legal, safeguarding, professional, clinical, insurance, tax, or third-party considerations.
How your data is processed
Information submitted through the contact form is used to respond to your enquiry and manage the therapy service.
Therapy notes and session records are stored securely and are used to support the therapy work, maintain continuity, manage risk where relevant, and meet professional responsibilities.
Payment and invoice information is used for administration, accounting, and tax purposes.
Website and analytics data may be used to understand how the website is used and whether it is working clearly.
I do not sell your personal information and I do not share your personal information for third-party marketing.
Cookies and analytics
This website uses cookies and similar technologies. Some cookies are essential for the website to function.
This website also uses Google Analytics through a Google tag to understand basic website use, such as page views, traffic sources, device information, and how visitors move around the site. Analytics cookies should only be used where consent has been given through the cookie banner or website settings.
You can also manage cookies through your browser settings. For more information, please read the Cookie Policy
Data storage and transfers
This website is hosted by Squarespace.
Squarespace, Google Analytics, and other service providers may process limited technical or administrative data outside the UK.
Where this happens, appropriate safeguards should be used for international data transfers.
Therapy notes are not published or made publicly accessible through this website.
For more detail about service providers, storage, confidentiality, and retention, please read the Privacy Notice
Subject access request
You can ask for a copy of personal information I hold about you.
I may need to confirm your identity before responding and I will respond in line with UK data protection law. In most cases, this means responding within one month.
Searches for information will be reasonable and proportionate. In some circumstances, information may be withheld where an exemption applies. This may include information involving another person, information connected to legal or professional duties, or information where disclosure could create a serious risk of harm.
Data protection complaints
If you have a concern about how I collect, use, store, or share your personal information, please contact me through the Contact page.
I will acknowledge data protection complaints within 30 days of receiving them and I will take appropriate steps to review the concern, keep you informed where needed, and respond without undue delay.
If you are not satisfied with my response, you have the right to raise a concern with the Information Commissioner’s Office.
The ICO website is: ico.org.uk
More information
FAQ: GDPR
-
GDPR stands for General Data Protection Regulation. In the UK, it forms part of the law that protects personal information and gives people rights over how their data is used.
-
You may have the right to access, correct, delete, restrict, object to, or request a copy of your personal information. These rights depend on the circumstances and are not always absolute.
-
Information from the contact form is used to respond to your enquiry. Therapy records are stored securely and used to support the therapy work, administration, legal obligations, safeguarding, and professional responsibilities.
-
Yes. This website uses Google Analytics through a Google tag to understand basic website use. Analytics cookies should only be used where consent has been given through the cookie banner or website settings.
-
Website and technical data may be processed by service providers such as Squarespace and Google Analytics. Therapy notes and records are stored securely and are not published or made publicly accessible through the website.
-
You can contact Rick directly through the Contact page. Data protection complaints will be acknowledged within 30 days. You can also raise a concern with the Information Commissioner’s Office at ico.org.uk