Privacy

Privacy policy.

Last updated: June 2026 · Data controller: Natalija Hayter, 135 Cambridge Street, Pimlico, London SW1V 4QA · natalija.hayter@gmail.com

What this covers

This policy explains how personal information is handled when you visit this website or contact the practice. It is written to comply with UK GDPR and the Data Protection Act 2018.

What is collected, and why

Enquiries. If you email, WhatsApp or call, the practice receives the contact details and any information you choose to share. This is used solely to respond to you and, if you become a client, to provide therapy. The lawful basis is legitimate interest (responding to your enquiry) and, for health-related information you volunteer, your explicit consent.

The self-assessment questionnaires. Your answers and scores are processed entirely on your own device by your browser. They are not transmitted, stored, or visible to the practice in any way.

Website analytics. This site does not use advertising trackers or marketing cookies. If privacy-respecting, cookie-free analytics are enabled, they measure page visits in aggregate without identifying individuals.

Clients

If you enter therapy, brief clinical records are kept as required by professional standards (BABCP). These are stored securely, never sold or shared for marketing, and disclosed only in the limited circumstances explained in your therapy agreement — such as serious risk of harm or a legal obligation.

How long information is kept

Enquiry correspondence that does not lead to therapy is deleted within 12 months. Clinical records are retained for the period required by professional and insurance guidance, then securely destroyed.

Your rights

You may ask to access, correct, or delete the personal information held about you, and you may withdraw consent at any time. To do so, email natalija.hayter@gmail.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Third parties

This site is hosted on Cloudflare Pages. Email is provided by Google (Gmail) and messaging by WhatsApp; their own privacy policies apply to those services. Links to Instagram and LinkedIn lead to platforms governed by their own policies.