Privacy Policy

Effective Date: September 2025

Confidentiality and trust are at the heart of what I do. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or engage in therapy services.

1. Who We Are

Charlotte Kimbley Therapy is a psychotherapy practice based in Manchester, UK. I am committed to safeguarding your privacy and handling your personal data with respect and care.

2. Information we collect

We may collect the following types of information:

  • Website Use Data: When you visit our site, we may collect non-identifiable information (such as pages visited, time spent, browser type) via cookies. See our [Cookie Policy].

  • Contact Information: If you fill out a contact form, request an appointment, or email us, we may collect your name, phone number, and email address.

  • Therapy Records: If you become a client, we will collect and securely store clinical information necessary to provide safe and ethical therapy.

3. How We Use Your Information

We use your information for:

  • Providing therapy services.

  • Responding to inquiries and scheduling appointments.

  • Improving website functionality and security.

  • Meeting legal or regulatory requirements.

We do not sell, share, or use your information for advertising purposes.

4. Legal Basis for Processing (GDPR)

If you are in the EU/UK, we process your data under one or more of the following legal bases:

  • Consent: When you provide information voluntarily (e.g., through a contact form).

  • Contract: To provide therapeutic services.

  • Legal Obligation: To comply with laws and regulations.

  • Legitimate Interests: For website analytics and practice management.

5. Confidentiality in Therapy

Therapy information is treated with strict confidentiality. Exceptions apply only where required by law (e.g., risk of harm to self or others, child/vulnerable adult protection, or court order).

6. Data Storage & Security

  • Clinical records are stored securely in accordance with [HIPAA / GDPR] requirements.

  • Website data is stored on secure servers.

  • We take appropriate technical and organizational measures to prevent unauthorized access, loss, or misuse of your data.

7. Data Sharing

We do not share your personal data with third parties except:

  • With your explicit consent.

  • Where required by law.

  • With trusted service providers (e.g., secure email/telehealth platforms), bound by confidentiality agreements.

8. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data.

  • Request correction or deletion.

  • Restrict or object to certain processing.

  • Withdraw consent at any time (where applicable).

  • File a complaint with a data protection authority.

9. Retention of Information

  • Clinical records are retained for [X years, depending on local regulations] after therapy ends, then securely destroyed.

  • Website form data is retained only as long as needed to respond to inquiries.

10. Children’s Privacy

This website is not intended for children under 16 without parental/guardian consent. Therapy services for minors require appropriate legal consent.

11. Updates to This Policy

We may update this Privacy Policy occasionally to reflect changes in law, regulation, or practice. Please check back periodically.

12. Contact Us

If you have questions about this Privacy Policy or your personal data, please email me.