What this covers
This policy explains how personal information is handled when you visit this website or contact the practice. It is written to comply with UK GDPR and the Data Protection Act 2018.
What is collected, and why
Enquiries. If you email, WhatsApp or call, the practice receives the contact details and any information you choose to share. This is used solely to respond to you and, if you become a client, to provide therapy. The lawful basis is legitimate interest (responding to your enquiry) and, for health-related information you volunteer, your explicit consent.
The self-assessment questionnaires. Your answers and scores are processed entirely on your own device by your browser. They are not transmitted, stored, or visible to the practice in any way.
Website operation and measurement. This site does not use advertising trackers or marketing cookies. Cloudflare may process technical request data needed to deliver and protect the site. Booking links include non-identifying source tags so the practice can see which page led to a confirmed Calendly booking.
Online booking. If you use the booking page, Calendly processes the contact, scheduling and time-zone information you provide. Please do not put sensitive clinical details in the scheduling form; these are not needed to reserve an assessment.
Newsletter. If you ask to receive occasional emails, the practice records your email address, the date and the wording of your request. This is used only to send new articles and practice updates on the basis of your consent. Newsletter emails do not use tracking pixels. You can withdraw consent at any time by replying or emailing the practice; your address will then be removed from the active list and retained only on a suppression record so you are not contacted again by mistake.
Clients
If you enter therapy, brief clinical records are kept as required by professional standards (BABCP). These are stored securely, never sold or shared for marketing, and disclosed only in the limited circumstances explained in your therapy agreement — such as serious risk of harm or a legal obligation.
How long information is kept
Enquiry correspondence that does not lead to therapy is deleted within 12 months. Clinical records are retained for the period required by professional and insurance guidance, then securely destroyed.
Your rights
You may ask to access, correct, or delete the personal information held about you, and you may withdraw consent at any time. To do so, email natalija.hayter@gmail.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Third parties
This site is hosted on Cloudflare Pages. Online scheduling is provided by Calendly, email by Google (Gmail), and messaging by WhatsApp; each service processes data under its own privacy terms. Links to Instagram and LinkedIn lead to platforms governed by their own policies.
NATALIJA HAYTERPSYCHOTHERAPY & COUNSELLING