Privacy policy — Harley Street Therapy

ICO Registration: ZB972486

Summary

I take your confidentiality seriously. This notice explains how your personal information is collected, used and protected in line with UK GDPR and the Data Protection Act 2018.

Who is responsible for your data

Controller: Harley Street Therapy, Harley Street, London W1. Contact: info@harleystreettherapy.com · +44 20 7175 0960. ICO registration: ZB972486.

Information I collect

Identity and contact details you provide; minimal clinical notes and session records; administrative information (bookings, invoices, correspondence); referrer details where relevant (for example a GP or agent).

How and why your information is used

Your information is used to provide psychotherapy and manage the practice, including appointment scheduling, invoicing, and safeguarding where required. The main lawful bases are performance of a contract, legitimate interests and, for special category data, the provision of health care.

Notes, records and disclosures

Notes are neutral and kept to a minimum. Where clinically useful and with your consent, I can liaise with your GP or allied clinicians. If therapy relates to an investigation or legal proceedings, I follow current guidance so therapy does not need to pause. In limited circumstances, records may be requested by the justice system where the law requires.

How long information is kept

Administrative records are usually kept for up to 7 years for tax and insurance purposes. Clinical notes are usually retained for up to 7 years after your last appointment, unless a different period is required by law or agreed with you.

Your rights

You have rights to access your information, to request correction or deletion, to restrict or object to processing, and to data portability. You can withdraw consent where it is relied on. To exercise your rights, contact me using the details above.

Sharing and transfers

Your information is not sold. It may be shared with service providers who support the practice (such as secure email, scheduling, payments), bound by confidentiality and data protection terms. Information is stored in the UK or EEA where possible; any transfers are protected by appropriate safeguards.

Security

Reasonable technical and organisational measures are in place to protect information, including encrypted systems for online sessions and restricted access to records.

Cookies

This website aims to use only essential cookies. If analytics are enabled in future, you will be informed and given choices.

Concerns and complaints

If you have concerns about how your information is handled, please contact me first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.