1. Who We Are

Yes2Therapy provides mental health and wellbeing services, including therapy sessions and consultations.

For data protection purposes, Yes2Therapy is the Data Controller of your personal information.

Contact:
Email: hello@yes2therapy.com
Website: Yes2Therapy.com

2. What Data We Collect

We may collect and process the following personal data:

a. Personal Information

• Name, date of birth, address
• Phone number and email address

b. Health & Sensitive Data

• Information shared during therapy sessions
• Mental health history and wellbeing notes

(This is classified as special category data under UK GDPR)

c. Technical Data

• IP address
• Browser type and device information
• Website usage data (via cookies)

3. How We Use Your Data

We use your data to:

• Provide therapy services
• Manage bookings and appointments
• Communicate with you
• Maintain clinical records
• Comply with legal and regulatory obligations

4. Legal Basis for Processing

We process your data under the following legal bases:

• Consent – for therapy and sensitive data processing
• Contract – to deliver services you have requested
• Legal obligation – where required by law
• Legitimate interests – for running and improving our services

5. Confidentiality

All personal information shared during therapy is treated as confidential.

However, confidentiality may be broken if:

• There is a risk of serious harm to you or others
• There are safeguarding concerns
• Disclosure is required by law

6. How We Store Your Data

• Data is stored securely using encrypted systems
• Access is restricted to authorised personnel only
• We take appropriate technical and organisational measures to protect your data

7. Data Retention

We retain your data only as long as necessary:

• Therapy records are typically kept for 7 years after your last session (or longer if legally required)
• After this period, data will be securely deleted or anonymised

8. Sharing Your Data

We do not sell your data.

We may share your data with:

• Trusted service providers (e.g., secure booking or video platforms like Zoom or Microsoft Teams)
• Regulatory or legal authorities where required

All third parties are required to respect your data and comply with data protection laws.

9. Your Rights (UK GDPR)

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

You can exercise your rights by contacting us.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

10. Cookies

Our website may use cookies to improve user experience and analyse traffic.

You can control cookie preferences through your browser settings.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for their privacy practices.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

13. Contact Us

If you have any questions about this Privacy Policy or your data:

Email: hello@yes2therapy.com
Website: Yes2Therapy.com