Last updated: March 2025. This policy applies to our website and related services operated by UK Inkind Psychology (referred to as "we", "us", or "UK Inkind").
1. Who we are
UK Inkind provides psychological therapy, assessments, and related services. For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we act as a data controller in respect of personal data processed through this website and our administrative processes, unless we tell you otherwise (for example where we process data solely on behalf of another organisation).
If you have questions about this policy or your data, you can contact us using the details on our Contact page.
2. What information we collect
We may collect and process:
- Identity and contact data: name, email address, telephone number, and similar details you provide when you enquire, book, or communicate with us.
- Technical data: IP address, browser type and version, time zone, device information, and cookies or similar technologies where used (see below).
- Usage data: information about how you use our website (for example pages visited), where such data is collected through analytics tools we use.
- Health-related information: if you choose to share clinical or health information with us, this may include special category data under data protection law. We only process such information where we have a lawful basis and appropriate safeguards in place.
3. How we use your information
We use personal data to:
- Respond to enquiries and manage appointments.
- Deliver therapy, assessments, and related clinical services in line with professional and regulatory obligations.
- Process payments, invoices, and insurance-related administration where applicable.
- Improve our website, services, and security; and comply with legal and regulatory requirements.
- Send communications you have agreed to receive (for example newsletters), where you have opted in.
We rely on appropriate lawful bases under UK GDPR, which may include consent, performance of a contract, legitimate interests (where balanced against your rights), or legal obligation, depending on the activity.
4. Sharing your information
We do not sell your personal data. We may share information with:
- Professional staff and clinicians involved in your care, where relevant.
- Service providers who assist us (for example IT hosting, email, or booking systems), under strict confidentiality and data processing terms.
- Insurers or other third parties where you have asked us to or where required for billing or continuity of care.
- Regulators, law enforcement, or others where we are required to by law or professional duty (including safeguarding).
5. International transfers
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place (for example adequacy regulations or standard contractual clauses) in line with applicable law.
6. How long we keep data
We retain personal data only for as long as necessary for the purposes described in this policy, including legal, regulatory, insurance, and professional record-keeping requirements (which may require retention of clinical records for specified periods).
7. Your rights
Under UK data protection law you may have the right to:
- Request access to your personal data.
- Request correction of inaccurate data.
- Request erasure, restriction, or objection in certain cases.
- Data portability, where applicable.
- Withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise your rights, contact us via our website. We may need to verify your identity before responding.
8. Cookies and similar technologies
Our website may use cookies or similar technologies to support essential functionality, remember preferences, or understand how the site is used. You can control cookies through your browser settings. Where non-essential cookies are used, we will seek your consent where required.
9. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure; we encourage you to use secure channels when sending sensitive information.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will be revised when we do. We encourage you to review this page periodically.
