Privacy Policy for The Mindset Clinic

Effective Date: 1 October 2025 Last Updated: 1 October 2025

1. Introduction

At The Mindset Clinic, we are committed to protecting your privacy and ensuring the confidentiality of your personal information. This policy explains how we collect, use, store, and protect your data in accordance with the UK General Data Protection Regulation (UK GDPR).

2. What Information We Collect

We may collect and process the following types of personal data:

• Identity Data: Name, date of birth, gender, contact details
• Health Data: Medical history, psychological assessments, therapy notes
• Usage Data: Website interactions, appointment bookings, feedback forms
• Financial Data: Payment details (processed securely via third-party providers)

3. How We Use Your Information 

We use your data to:

• Provide therapeutic services and tailor treatment plans
• Communicate appointment details and updates
• Maintain accurate clinical records
• Improve our services and client experience
• Comply with legal and regulatory obligations

4. Legal Basis for Processing

We process your data under the following lawful bases:

• Consent: When you voluntarily provide information
• Contract: To deliver agreed-upon services
• Legal Obligation: For record-keeping and safeguarding
• Legitimate Interests: To improve clinic operations and client care

5. Sharing Your Information

We do not sell or share your personal data for marketing purposes. We may share information with:

• Qualified professionals within our clinic (on a need-to-know basis)
• Emergency services or safeguarding authorities (if required by law)
• Technology providers who support our secure systems (e.g., encrypted booking platforms).

6. Data Security

We take data protection seriously. Your information is stored securely using encrypted systems and access is restricted to authorised personnel only. We regularly review our security protocols to ensure your data remains safe.

7. Your Rights

You have the right to:

• Access your personal data
• Request corrections or deletions
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner’s Office (ICO)

8. Data Retention

We retain your records for a minimum of 7 years after your last appointment, or for 7 years after you turn 18 years of age, in line with professional guidelines. After this period, data is securely deleted.

9. Cookies and Website Analytics

Our website may use cookies to enhance user experience. You can manage cookie preferences via your browser settings. We use anonymised analytics to understand how visitors use our site.

10. Contact Us

If you have questions about this policy or your data, please contact:

Email: info@mindsetclinic.co.uk

Phone: +44 (0) 7803 603 882

Registered Office: 71-75 Shelton Street, London, England, WC2H 9JQ