GDPR Policy
Last updated: April 2026
1. Who We Are
Clear Minds Talking Therapies is operated by Ste Boylan, a BACP-registered relationship psychotherapist based in the North West of England. We are the data controller for any personal data you provide to us.
Contact: clearmindstatl@icloud.com
2. What Data We Collect
- Identity data: first name, last name
- Contact data: email address, phone number
- Appointment data: date, time, session type, location preference, notes
- Payment data: processed securely by Stripe — we never store card details
- Technical data: IP address, browser type (collected automatically when you visit the website)
3. Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Consent: You provide explicit consent when completing a booking form.
- Contract: Processing is necessary to fulfil your appointment booking.
- Legitimate interests: For administrative communications and service improvement.
- Legal obligation: Where required to comply with applicable law.
4. How We Use Your Data
- To confirm and manage your therapy appointments
- To send appointment reminders and follow-up communications
- To process payments via Stripe
- To comply with professional and legal obligations
5. Therapeutic Confidentiality
Everything discussed during therapy sessions is strictly confidential. We will not disclose session content to any third party without your written consent, except in the following limited circumstances:
- There is a serious risk of harm to you or others
- We are required to do so by law or court order
6. Data Sharing
We do not sell your personal data. We may share it with:
- Stripe – payment processing (PCI-DSS compliant)
- Google – calendar and video call management
- Resend – transactional email delivery
All processors are bound by appropriate data protection agreements.
7. Data Retention
We retain personal data for as long as necessary to provide our services and comply with legal obligations. Therapy records are typically kept for a minimum of 7 years in accordance with BACP guidelines, after which they are securely deleted.
8. Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten"), subject to legal obligations
- Restrict how we process your data
- Object to processing based on legitimate interests
- Data portability — receive your data in a machine-readable format
- Withdraw consent at any time, without affecting prior lawful processing
To exercise any of these rights, contact us at clearmindstatl@icloud.com.
9. Cookies
Our website uses only essential functional cookies necessary for the site to operate. We do not use tracking or advertising cookies.
10. Security
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. All data is transmitted over encrypted HTTPS connections.
11. Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).