top of page

Privacy Policy

1. Who We Are

 

The Growth Practice provides online psychological therapy via Microsoft Teams.

​

This Privacy Policy explains how we collect, use, and protect your personal data in line with UK GDPR and the Data Protection Act 2018.

​

We are committed to respecting your privacy and keeping your information safe.

​

2. What Data We Collect

 

We may collect the following types of personal data:

  • Identity & Contact Data: name, email, phone number, address

  • Health / Sensitive Data: therapy intake forms, clinical notes, risk assessments (explicit consent is required)

  • Session & Communication Data: emails, booking information, video session metadata

  • Technical Data: IP addresses, device/browser info, website analytics via cookies

  • Marketing Preferences: if you choose to receive newsletters or updates

 

We do not collect unnecessary data, and we do not sell your information.

 

3. How We Collect Data

​

  • Directly from you: intake forms, emails, phone calls, booking forms, therapy sessions

  • Automatically: website cookies and analytics

  • From third parties: practice management software (e.g., WriteUpp), Microsoft Teams for sessions

 

4. Legal Bases for Processing

 

We only process your personal data when there is a lawful basis:

  • Purpose

  • Legal Basis

  • Provide therapy

  • Performance of a contract

  • Record keeping for clinical governance

  • Legal obligation & legitimate interest

  • Communicate about sessions

  • Contractual necessity

  • Marketing communications

  • Explicit consent

  • Website analytics

  • Legitimate interest (non-identifiable)

  • Sensitive/health data is processed only with explicit consent, except where there is a legal obligation (e.g., safeguarding).
     

5. How We Use Your Data

​

We use your data to:

  • Provide safe and effective therapy

  • Manage bookings, payments, and communications

  • Comply with legal and professional obligations

  • Analyse website usage to improve services (aggregated and anonymised)

  • Send newsletters or marketing only if you opt in
     

6. Sharing Your Data
 

We may share your data with:

  • Third-party software providers: practice management software, secure email, payment processors

  • Regulators or authorities if legally required (e.g., safeguarding situations)

  • Supervisors or professional advisors in anonymised form when needed
     

All third parties are GDPR-compliant and only process your data according to our instructions.


7. International Transfers


Some data may be stored or processed outside the UK/EEA (e.g., Microsoft Teams servers).

We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data.


8. Cookies & Analytics

 

Our website uses cookies to improve functionality and gather analytics.

 

Essential cookies: These are necessary for the website to function, such as secure forms and keeping your session safe. They cannot be switched off.

Non-essential cookies: These include analytics and tracking cookies that help us understand how our website is used. You can choose to accept or refuse these.

​

You can manage or disable cookies at any time through your browser settings, though some website features may not work properly if you do. By continuing to use our website and clicking “Accept” on the banner, you consent to our use of non-essential cookies.

​

9. Data Security

​

We implement technical and organisational measures to keep your data safe, including:

  • Secure, encrypted storage

  • Restricted access (practitioner only)

  • Strong passwords and SSL encryption
     

No system is 100% secure, so absolute security cannot be guaranteed.

​

10. Data Retention
 

We retain personal data in line with professional guidance:

  • Adult therapy clients: 7 years after the end of therapy

  • Website / marketing data: until you withdraw consent or as legally required
     

11. Your Rights
 

You have the right to:

  • Access the data we hold about you

  • Correct any inaccurate information

  • Request erasure or restriction of your data

  • Withdraw consent

  • Object to processing where the lawful basis is legitimate interest

  • Receive your data in a portable format
     

To exercise your rights, contact info@thegrowthpracticetherapy.co.uk.
 

You can also contact the ICO if necessary: www.ico.org.uk


12. Changes to This Policy
 

We may update this Privacy Policy from time to time.
 

13. Contact
 

If you have any questions about this policy or how we handle your data, contact:
 

Dr Alice Austin-Harris, The Growth Practice
Email: info@thegrowthpracticetherapy.co.uk

bottom of page