As a client or user of our services, you have certain rights regarding your personal data under data protection law. We want to make sure you are aware of your rights and can exercise them easily:

​

• Right to Be Informed: You have the right to be informed about how your personal data is being collected and used. This Privacy Policy is one of the ways we fulfill that right, by providing you details about our data practices.

​

• Right of Access: You can request a copy of the personal information we hold about you (commonly known as making a "Subject Access Request"). We will provide you with a summary of the data we have, and details on how it is used, usually within one month of your request.

​

• Right to Rectification: If any of your information is incorrect or incomplete, you have the right to have it corrected. Just let us know what needs updating, and we will fix it.

​

• Right to Erasure: You can ask us to delete or remove your personal data in certain circumstances – for example, if it's no longer needed for the purpose we collected it, or if you initially consented but have now withdrawn your consent. This is sometimes called the "right to be forgotten". We will review such requests and, if there is no lawful reason for us to keep the data, we will delete it. (Do note that if you ask us to delete information that we are required to keep by law or that is essential for us to provide your care, we may not be able to fulfill that request – but we will explain this to you if it applies.)

​

• Right to Restrict Processing: You have the right to ask us to stop or limit the processing of your data in certain situations. For instance, if you believe the data is inaccurate, or you have objected to our use of your data, you can request a restriction until the issue is resolved. This means we would store your data but not actively use it until the restriction is lifted.

​

• Right to Data Portability: You have the right, in some cases, to receive your personal data in a structured, commonly used and machine-readable format, and to have that data transmitted to another data controller. This typically applies to information you have provided to us electronically, where we process it based on your consent or a contract with you. For example, if you wanted to transfer your treatment records to another therapist or clinic, we can assist in providing a copy of your records (subject to confidentiality considerations).

​

• Right to Object: You can object to certain types of processing. You have an absolute right to object to your data being used for direct marketing purposes – if we ever send you marketing communications, you can tell us to stop and we will stop. You can also object if you feel our processing of your data is not justified by our stated legitimate interests or if you want us to stop using data for research or statistical purposes. We will consider your objection and respond with our decision; in general, we will cease processing unless we have a compelling legitimate ground to continue.

​

• Rights Related to Automated Decision-Making: You have rights related to automated decision making and profiling. However, we do not carry out any automated decision-making or profiling activities with your personal data that would have legal or significant effects on you. In the event that this changes in the future, we will inform you and ensure your rights in this area (such as the right to request human intervention or to contest the decision) are upheld.

​

• Right to Withdraw Consent: If we are processing any of your data based on your consent, you have the right to withdraw that consent at any time. For example, if you agreed to receive marketing emails, you can later opt out and we will stop sending them. Withdrawing consent will not affect the lawfulness of any use of your data that happened before you withdrew consent.

​

• Right to Complain: If you have any concerns or are unhappy about how we have handled your personal data, please let us know first so we can try to put things right. We take privacy complaints very seriously and will do our best to address your concerns. However, if you are not satisfied with our response, you have the right to lodge a complaint with the UK's supervisory authority for data protection, which is the Information Commissioner’s Office (ICO). You can contact the ICO for advice or to make a complaint by calling 0303 123 1113 or through their website at www.ico.org.uk.

​​​

Exercising Your Rights: You can exercise any of these rights by contacting us (see the "Contact Us" section below for how to reach us). We will respond to your requests as soon as we can, and within one month at the latest (this can be extended by a further two months for complex requests, but we will inform you if an extension is needed). We may need to verify your identity before processing certain requests, to ensure we are protecting your information from unauthorised access. There is normally no fee for exercising your rights. If for some reason we cannot comply with your request (for example, if a legal exception applies), we will explain to you the reason.