Privacy Policy

​

Effective Date: 02/06/2025

Company Name: Brighthelm Psychology
Data Controller: Andrea Cohen
Business Location: Sussex, United Kingdom
Email Contact: brighthelmpsychology@mercury.me.uk

​

1. Introduction

​

Brighthelm Psychology ("we", "our", "us") is committed to protecting and respecting your privacy. This policy outlines how we collect, use, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are a provider of psychological therapy and mental health services based in Sussex, UK. This policy applies to all individuals who visit our website or engage with our services.

 

2. What Data We Collect

We may collect and process the following categories of personal data:

 

2.1 Website Visitors

• Name (if submitted through forms)

• Email address

• Phone number

• IP address

• Browser type and device type

• Website usage data (via cookies and analytics)

 

2.2 Therapy Clients

If you engage with us as a client, we may also collect:

• Date of birth

• Address

• GP contact details

• Emergency contact information

• Relevant health or mental health history

• Session notes and assessments

• Payment details (if relevant)

We only collect data necessary to provide our services safely, ethically, and effectively.

 

3. How We Collect Your Data

Your data is collected when:

• You fill out a contact form on our website

• You contact us via email or phone

• You become a client and complete intake forms

• You provide information during therapy sessions

• You use our website (automatically collected analytics or cookies)

 

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

• Consent: For initial inquiries and marketing (if applicable)

• Contract: To provide therapy services to you

• Legal obligation: To meet our legal or regulatory responsibilities

• Vital interests: In case of risk of harm

• Legitimate interest: For internal administration or website functionality

 

Special category data (e.g., health information) is processed under:

• Article 9(2)(h) – provision of health or social care

 

5. How We Use Your Data

We may use your personal data to:

• Respond to enquiries

• Schedule and manage appointments

• Provide psychological therapy

• Maintain accurate clinical records

• Comply with legal or professional obligations

• Improve our website performance and security

 

We do not use your data for automated decision-making or profiling.

 

6. How We Store and Protect Your Data

We store data securely using encrypted digital systems and/or password-protected devices. Physical notes (if any) are kept in locked storage.

We retain client records for 7 years after the end of therapy, in accordance with guidance from professional regulatory bodies such as the HCPC. After this time, records are securely deleted or destroyed.

 

7. Sharing Your Data

We will never sell or lease your data.

We may share your data only under the following circumstances:

• With your explicit consent (e.g. referrals)

• If required by law (e.g. Safeguarding concerns, Court Orders)

• With professional bodies for ethical or legal compliance

• With IT service providers who help us maintain secure systems (all under appropriate data processing agreements)

 

8. Your Data Protection Rights

Under UK data protection law, you have the right to:

• Access a copy of your data

• Request rectification of inaccurate data

• Request erasure of your data (in some circumstances)

• Object to processing

• Request restriction of processing

• Data portability (where applicable)

• Withdraw consent at any time (for consent-based processing)

• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, contact us at brighthelmpsychology@mercury.me.uk

 

9. Cookies

Our website may use cookies or similar technologies to enhance user experience and analyse traffic.

You can manage or disable cookies via your browser settings. 

 

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those websites. Please review their policies separately.

 

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law or our practices. The most recent version will always be available on our website, with the “Effective Date” noted above.

 

12. Contact

For any questions or to exercise your data rights, please contact:

Brighthelm Psychology
Email: brighthelmpsychology@mercury.me.uk