Mindpath Privacy Policy

Last change: February 19, 2026

Privacy Notice

MindPath Psychology is committed to safeguarding your personal information and respecting your privacy.

We recognise that when you share personal information with us, you are placing trust in our professionalism and integrity. We take this responsibility seriously and comply with all relevant UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, alongside applicable professional confidentiality standards.

This Privacy Notice explains how we collect, use, store, and protect your personal data, and outlines your rights in relation to that information.

By engaging with our services, contacting us, or using our website, you agree to the terms set out in this Privacy Notice.

For the purposes of data protection legislation, the Data Controller is:

MindPath Psychology

JWS, Hopper Hill Rd

Eastfield

Scarborough

YO11 3YS

Email: lewis@mindpathpsych.co.uk

References to “we”, “us”, or “our” mean MindPath Psychology.

The Information We Collect

Personal data means any information that can identify you directly or indirectly.

Depending on your interaction with us, we may collect and process:

• Your name, postal address, email address, and telephone number

• Information provided during enquiries or booking appointments

• Clinical information relevant to assessment or therapy

• Records of sessions, reports, and professional notes

• Correspondence between you and MindPath Psychology

• Payment and billing information

• Feedback or outcome measures

• Information provided via our website

Where relevant to providing care, we may collect special category data, including information relating to your health. This information receives enhanced legal protection under UK data protection law.

How We Collect Information

We collect personal information when you:

• Contact us to enquire about services

• Book or attend appointments

• Complete forms or assessments

• Make payments

• Communicate with us by email or telephone

• Use our website

Technical information such as IP address, browser type, and usage data may be automatically collected when you visit our website.

Information From Third Parties

In some circumstances, we may receive personal data from:

• Referring healthcare professionals or the NHS

• Corporate clients referring employees

• Insurance providers

• Partner clinicians involved in your care

This information is processed solely for the purpose of delivering services or ensuring continuity of care.

Legal Basis for Processing

We process personal data in accordance with UK GDPR under one or more of the following lawful bases:

• To fulfil a contract for the provision of services

• To comply with legal or regulatory obligations

• Where processing is necessary for our legitimate professional interests

• Where you have given explicit consent

Where we process special category data, this is typically because:

• It is necessary for the provision of health or psychological care

• You have given explicit consent

• It is required for legal claims or safeguarding purposes

You may withdraw consent at any time by contacting us.

How We Use Your Information

We use personal data to:

• Provide psychological therapy, assessment, or consultancy

• Manage appointments and communication

• Maintain accurate clinical records

• Issue invoices and manage payments

• Evaluate and improve service quality

• Meet professional, legal, and regulatory requirements

Where possible, anonymised information may be used for audit or service development purposes.

Data Security and Storage

We implement appropriate technical and organisational safeguards to protect your information from loss, misuse, unauthorised access, or disclosure.

Records are stored securely and retained only for as long as required in line with professional and legal obligations. In most cases, clinical records are retained for up to eight years after the conclusion of services, unless legislation requires otherwise.

If data is processed or stored outside the UK, appropriate safeguards will be in place to ensure compliance with UK data protection standards.

While we take reasonable precautions, no method of electronic transmission can be guaranteed completely secure.

Sharing Your Information

We may share personal data where necessary with:

• Secure IT and data hosting providers

• Accountants or payment service providers

• Regulatory bodies such as the Health and Care Professions Council

• Insurance providers where applicable

• Other healthcare professionals involved in your care

All third parties are required to maintain confidentiality and comply with data protection obligations.

We may also disclose information where legally required or where necessary to protect life, health, or safety.

Website Cookies

Our website uses cookies to improve functionality and user experience. Cookies help us understand how visitors interact with our site and allow certain features to operate effectively.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website performance.

For further information, please contact us at the address above.

Marketing Communications

If you choose to receive updates about our services, we may contact you by email or other agreed methods. You can withdraw consent at any time by emailing:

lewis@mindpathpsych.co.uk

Please allow reasonable time for your preferences to be updated.

Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate information

• Request deletion of data where appropriate

• Restrict or object to certain types of processing

• Request transfer of your data to another provider

To exercise any of these rights, please contact:

lewis@mindpathpsych.co.uk

We may request proof of identity before responding.

If you remain dissatisfied, you may contact the Information Commissioner’s Office at www.ico.org.uk or call 0303 123 1113.

Updates to This Privacy Notice

We review this Privacy Notice periodically and may update it to reflect changes in legislation or practice. Please revisit this page from time to time.