Privacy Statement (UK)

Last updated: 03.10.2025

Francesca Francis Therapy (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our services or visit our website: francescafrancistherapy.co.uk (the “Website”).

By engaging with our Website or Services, you agree to the practices described in this Policy.


1. Data We Collect

We may collect and process the following personal information:

  • Identity Data: name, title, date of birth.

  • Contact Data: email address, phone number, postal address.

  • Health Data: information relevant to therapy, mental health history, medication, GP contact details.

  • Transactional Data: records of payments for sessions.

  • Technical Data: IP address, browser type, cookies, and analytics information from website use.

  • Communications Data: emails, messages, and notes from interactions.

Special Category Data (e.g. health information) is only collected when necessary for providing therapy and is handled with extra care under UK GDPR rules.


2. How We Use Your Data

We use your data to:

  • Provide therapy services safely and effectively.

  • Manage appointments, payments, and communication.

  • Keep records required by law and professional guidelines.

  • Improve our Website and Services.

  • Send session reminders and respond to enquiries.

We only process your data where we have a lawful basis, including consent, contractual necessity, legal obligation, or legitimate interest.


3. Sharing Your Data

We will not sell or rent your data. We may share it only in limited circumstances:

  • With your consent (e.g. liaising with your GP or other health professional).

  • Where required by law (e.g. safeguarding concerns, risk of serious harm, court order).

  • With professional advisors (e.g. accountant, legal counsel) where necessary.

  • With trusted third-party providers who support our Website, email, or payment systems — all bound by confidentiality and data protection obligations.


4. Data Storage & Retention

  • Your data is stored securely in password-protected systems and/or locked physical storage.

  • Therapy notes are kept separately from identifiable contact data.

  • We retain client records for up to 7 years after therapy ends (or longer if legally required, e.g. safeguarding cases).

  • After this period, data will be securely destroyed.


5. Your Rights

Under the UK GDPR, you have the right to:

  • Access your personal data.

  • Request correction of inaccurate data.

  • Request erasure (“right to be forgotten”), where applicable.

  • Restrict or object to processing.

  • Request data portability.

  • Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact us at: [Insert contact email].

If you are not satisfied, you may complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.

Scroll to Top