Privacy Policy

Last updated: 23/05/2026

This Privacy Policy explains how Finding Therapy ("we", "us", "our") collects, uses, and protects personal information when you visit our website or use our online therapy services. We are committed to handling your data transparently, securely, and in line with UK data protection law.

Finding Therapy is the data controller for the information collected through our platform. If you have any questions about this policy, please contact us at [email].

Information we collect

We collect information you provide directly, as well as information gathered automatically when you use our services. This may include:

  • Account and contact details: name, email address, phone number, postal address, date of birth, password.
  • Information about the young person receiving therapy: name, age, relationship to the account holder, and relevant background.
  • Health and wellbeing information: mental health history, presenting concerns, assessments, session notes, and information shared during therapy.
  • Payment information: processed securely through our payment provider; we do not store full card details.
  • Communications: messages, emails, and chat exchanges with our team or with therapists through the platform.
  • Technical information: IP address, device details, browser type, and usage data collected via cookies and similar technologies.

How we use your information

We use personal information to:

  • provide and manage our therapy services, including matching clients with therapists
  • process payments and manage bookings
  • communicate with you about appointments, service updates, and administrative matters
  • improve our website, services, and user experience
  • comply with our legal and regulatory obligations
  • respond to enquiries and provide customer support
  • where appropriate, send marketing communications (you can opt out at any time)

Legal bases for processing

Under UK GDPR, we rely on the following legal bases:

  • Contract: to deliver the services you have requested.
  • Consent: particularly for processing health information, marketing communications, and non-essential cookies. You can withdraw consent at any time.
  • Legitimate interests: for improving our services, preventing fraud, and keeping our platform secure, where these interests are not overridden by your rights.
  • Legal obligation: where we are required to process information to comply with the law.
  • Vital interests: in rare circumstances, to protect someone's life or safety.

Special category (health) data

Information relating to mental health is considered special category data under UK GDPR and is subject to additional protections. We process this information on the basis of your explicit consent and, where relevant, because it is necessary for the provision of healthcare services by professionals bound by a duty of confidentiality.

Children and young people

Our services are designed for young people, typically with a parent or guardian acting as the account holder. We take the privacy of young users seriously and only collect information necessary to provide therapy. Where appropriate, young people are informed about how their information is used in age-appropriate language. Parents and guardians have rights in relation to their child's information, subject to the child's own rights where they are competent to exercise them.

Safeguarding

Therapists and staff have a duty to break confidentiality where there is a serious risk of harm to the client or another person, or where required by law. In such cases, we may share relevant information with emergency services, safeguarding authorities, or other appropriate parties. We will, wherever possible, discuss this with you first.

Sharing your information

We share personal information with:

  • Therapists working with us, who may act as independent data controllers for clinical records they maintain.
  • Service providers supporting our operations, including hosting, analytics, email, payments, customer support, and secure communications.
  • Professional advisers such as accountants, insurers, and legal advisers where necessary.
  • Regulators, law enforcement, and public authorities where required by law.
  • Third parties in the event of a business sale, merger, or restructure.

We require all third parties to handle your information securely and in line with data protection law.

International transfers

Some of our service providers are based outside the UK. Where information is transferred internationally, we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses or adequacy decisions.

Data retention

We keep personal information only for as long as necessary for the purposes described in this policy, to meet our legal and regulatory obligations (including professional record-keeping requirements for clinical work), or to resolve disputes. Retention periods vary depending on the type of information.

Your rights

Under UK data protection law, you have the right to:

  • access the personal information we hold about you
  • request correction of inaccurate information
  • request deletion of your information, in certain circumstances
  • object to or restrict our processing, in certain circumstances
  • request portability of your information
  • withdraw consent where we rely on it
  • lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us at [email].

Cookies and analytics

We use cookies and similar technologies to operate our website, understand how it is used, and improve our services. You can manage your preferences through our cookie banner or your browser settings. See our Cookie Policy for more details.

Security

We take appropriate technical and organisational measures to protect your information, including encryption, access controls, and secure hosting. No system is ever fully secure, but we continuously review and improve our security practices.

Changes to this policy

We may update this policy from time to time. When we make significant changes, we will notify you through the website or by email. The latest version will always be available on our website, with the date of the most recent update.

Contact us

If you have questions, concerns, or requests relating to this policy, please contact us:

Email: ico@findingtherapy.co.uk

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.