Privacy Policy

1. Data Controller

Afrah Therapy is the data controller for the personal information we collect. You can contact us at:

Afrah Therapy
89 Fleet St
London EC4Y 1DH
Email: hello@afrah.uk
Phone: +447429411333

2. Information We Collect

We may collect and process the following types of personal data:

• Contact Information: Name, email address, phone number, and postal address
• Appointment Information: Booking details through Calendly, including dates and times
• Website Usage Data: Information collected through cookies and Google Analytics (see Section 8)
• Communications: Records of any correspondence between you and us
• Professional Information: Referral source, GP details (if provided)

Special Category Data: In the course of providing psychological services, we may collect health information. This sensitive data is processed only with your explicit consent and is subject to additional safeguards.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: For processing special category health data and for marketing communications
• Contract: To provide psychological services and manage appointments
• Legal Obligations: To comply with professional regulations and safeguarding requirements
• Legitimate Interests: For website analytics and improving our services
• Vital Interests: In emergency situations where it is necessary to protect someone's life

4. How We Use Your Information

We use your personal data to:

• Provide psychological therapy services
• Schedule and manage appointments via Calendly
• Communicate with you about your appointments and treatment
• Comply with professional and legal obligations
• Improve our website and services through analytics
• Send you relevant information about our services (with your consent)
• Ensure the safety and wellbeing of our clients and staff

5. Data Sharing

We take confidentiality seriously and will only share your information in the following circumstances:

• With your consent: When you have given explicit permission
• Calendly: For appointment booking and scheduling
• Professional obligations: Where required by law or professional regulations
• Safeguarding: Where there is a risk of harm to you or others
• Clinical supervision: Anonymised case information for professional development

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure storage of physical records in locked filing systems
• Password-protected and encrypted digital records
• Limited access to personal data on a need-to-know basis
• Regular security assessments and updates
• Professional confidentiality agreements with all staff

7. Data Retention

We retain your personal data in accordance with professional guidelines:

• Adult client records: 7 years after the last contact
• Child client records: Until their 25th birthday or 7 years after last contact (whichever is later)
• Financial records: 6 years as required by HMRC
• Website analytics data: Anonymised after 26 months

8. Cookies and Analytics

Our website uses cookies to enhance your experience and gather information about visitors and visits to our website. We use:

• Essential cookies: Required for the website to function properly
• Google Analytics: To understand how visitors use our website (anonymised data)

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our website.

9. Your Rights

Under UK data protection law, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request corrections to inaccurate data
• Right to erasure: Request deletion of your data (subject to legal retention requirements)
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to certain types of processing
• Right to withdraw consent: Where processing is based on consent

To exercise any of these rights, please contact us using the details above. We will respond to your request within one month.

10. Third-Party Services

We use Calendly for appointment booking. When you book through Calendly, you are also subject to their privacy policy. We recommend reviewing their privacy practices at https://calendly.com/privacy.

11. Children's Privacy

We provide services to young people with appropriate parental consent where required. We take additional care to protect the privacy of minors and process their data in accordance with their best interests.

12. International Transfers

Some of our service providers (such as Calendly) may process data outside the UK. We ensure appropriate safeguards are in place for any international transfers of personal data.

13. Complaints

If you have concerns about how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

14. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at:

Email: hello@afrah.uk
Phone: +447429411333
Post: Afrah Therapy, 89 Fleet St, London EC4Y 1DH