Privacy Notice
Working with you to keep your data secure
At Mindspace Therapy-Studio (MTS), protecting your personal data is our priority. We are committed to complying with all regulations and ensuring your privacy and confidentiality. This policy, combined with our terms and conditions, outlines how we handle your personal information if you are a client of MTS or a visitor to our website, in accordance with the General Data Protection Regulations (GDPR), effective from 25th May 2018.
These regulations increase the accountability of organizations handling personal data and grant individuals specific rights regarding their personal information—how it is collected, stored, used, shared, and protected. You can read more about GDPR on the Information Commissioner’s Office website.
If you have any questions about this policy or your personal data, please feel free to contact us. We're here to help.
Definitions
-
We, us, or Mindspace Therapy-Studio – this business and the people directly involved in running it.
-
Policy – this Privacy Policy.
-
Our website or site – this website.
-
Client – any person or company who uses our services.
-
Visitors – anyone who visits our website or social media profiles.
-
Our services – therapy, counselling, assessment, and consultation.
The type of personal information we collect
-
Names, email addresses, and telephone numbers when someone requests an initial consultation or becomes a client (usually via our website, in person, or by phone).
-
Details of the business/organization and the proposed service for preparing a quotation (usually via email or by post).
-
General queries via a contact form on our website.
How we collect personal information
We collect personal information directly when you provide it to us (as described above) or automatically as you navigate through the website.
Why we collect your personal information
Your personal information is collected to:
-
Fulfill our contractual obligations to our clients and provide our services.
-
Create and send invoices for completed work or services provided.
-
Verify identity and prevent unauthorized access to websites or services.
-
Monitor visitor traffic to our site and secure it against malicious visitors.
We also collect personal information to:
-
Operate and protect our website.
-
Improve our services and resolve technical issues.
-
Identify potential fraudulent activity and prevent spam and hacking.
-
Ensure compliance with our website Terms of Use.
-
Communicate effectively with clients via our website.
-
Manage our legal and operational affairs.
-
Provide clients with important information about changes to our services.
In some cases, we are required by law to collect personal information, such as when responding to requests from government authorities or law enforcement.
When we disclose your personal information
We typically do not need to disclose your personal information to third parties. However, there are certain situations where this may be necessary, such as:
-
To regulators and government authorities for compliance purposes.
-
To a purchaser or prospective purchaser of our business assets.
-
To respond to requests related to criminal investigations or suspected illegal activity.
-
To enforce our rights or address financial or reputational risks.
-
To a rights holder regarding intellectual property infringement allegations.
-
When authorized or required by law.
You will always be informed if we are required to disclose your personal information.
Where we transfer and/or store your personal information
Your data is processed and stored in a secure location in the United Kingdom.
How we keep your personal information secure
We take all reasonable steps to protect your information. Most of our data is kept in paper form. Digital personal information (including names, addresses, telephone numbers, and email addresses) is stored on a protected local computer network, accessible only to authorized personnel.
We are required by our governing bodies (e.g., BABCP) to keep hard copies of notes or clinical information for a period of 7 years after a client is discharged.
This website is powered by WebHealer, and cookies are set on the site. For more information, visit their .
Enquiries submitted through the contact form on this website are sent directly to us by email and deleted from the web host (WebHealer) systems once delivered. No data is passed on to third parties. Your information is used solely for correspondence between you and MTS.
While we strive to protect your information, we cannot guarantee the security of data transmitted via email. Any transmission is at your own risk. Once received, we take all reasonable steps to prevent unauthorized access.
How you can access your personal information
Under GDPR, you have the right to:
-
Request access to the personal data we hold about you.
-
Request the erasure of the personal data we hold about you.
-
Ask us to correct any personal information we hold about you.
-
Restrict or object to the processing of your personal data.
-
Withdraw consent to us using your personal information at any time.
When we need to update this policy
We may need to update this policy periodically to comply with the latest legal requirements and any changes to our privacy practices.
Reporting Concerns
If you have unresolved concerns, you have the right to complain to data protection authorities. In the UK, the relevant authority is the Information Commissioner’s Office (ICO).
Contact Information:
-
ICO website:
-
ICO telephone: 0303 123 1113
-
ICO textphone: 01625 545860
