Privacy Notice
Your privacy matters to me, and so does your trust. This notice explains what personal information I collect, why I collect it, how I look after it and what your rights are under UK data protection law (the UK GDPR and the Data Protection Act 2018). If anything's unclear, please just ask.
1. Who I am
Mind&Burt Therapies is the “data controller” for the information described here. This means I'm responsible for deciding how your personal data is held and used.
Data controller: Jennifer Burt, trading as Mind&Burt Therapies (sole trader)
Contact: hello@mindandburt.co.uk · 07501 754389
Correspondence: please contact me by email in the first instance
2. ICO registration
As an organisation that processes personal data, Mind&Burt Therapies (Jennifer Burt) is registered with the Information Commissioner's Office (ICO).
ICO registration number: ZC172966
3. The information I collect
Depending on how you interact with me, I may collect:
Identity and contact details - your name, email address, phone number and, where relevant, postal address.
Enquiry information - anything you share when you contact me or book an introductory call.
Health and wellbeing information - details relevant to your therapy, such as your reasons for seeking support, relevant medical or mental health background, GP details where appropriate, and notes from our sessions. This is “special category” data and is treated with particular care.
Booking and payment information - appointment details and confirmation of payment received by bank transfer.
Website information - if you use my website, limited technical data such as cookies and analytics (see section 10).
4. How I collect it
I collect information directly from you when you complete my client agreement form, contact me, book a session, or exchange emails, and, in some cases, from third parties you've authorised (for example, your GP) with your consent.
5. Why I use your information, and my lawful basis
Under data protection law I need a “lawful basis” to use your information. Here's what I do, why, and the basis I rely on:
Responding to your enquiry and arranging an introductory call - to help you decide whether to work with me. Basis: legitimate interests, or your consent.
Providing therapy and keeping session notes - to deliver the service you've asked for. Basis: contract; and for health information, your explicit consent.
Taking payment and keeping financial records - to run the business and meet my tax obligations. Basis: contract; legal obligation.
Keeping records as required by my insurer and professional bodies - professional and insurance requirements. Basis: legitimate interests; legal obligation.
Sending appointment reminders - to deliver the service. Basis: contract, or your consent.
Sending occasional updates (only if you opt in) - to keep you informed. Basis: your consent.
Because health information is special category data, I rely on your explicit consent to process it for your therapy, which you give on my client agreement form and can withdraw at any time (see section 8). Withdrawing consent won't affect anything done before you withdrew it, and I may still need to retain certain records as explained in section 7.
6. Who I share it with
I treat your information as confidential and do not sell it or share it for marketing. I may share limited information:
with my clinical supervisor, in anonymised form, as part of required professional supervision;
with trusted service providers who help me run the practice (for example, my email, forms, video-call and website providers), who act on my instructions and are bound to protect your data;
where the law requires it, or to protect someone from serious harm or in a safeguarding situation, as set out in my Terms and Conditions.
7. How long I keep it
I keep your information only for as long as necessary:
Therapy and clinical records - retained for 8 years after our last contact, in line with my insurer's and professional bodies' requirements. For clients who were under 18 at the start of treatment, records are retained until their 25th birthday, or their 26th birthday if they were 17 when treatment ended.
Financial records - retained for 6 years to meet tax and accounting obligations.
Enquiries that don't proceed - retained for up to 12 months, then securely deleted.
After these periods, information is securely deleted or destroyed.
8. Your rights
Under data protection law you have the right to: be informed about how your data is used (this notice); request a copy of the data I hold about you; ask me to correct anything inaccurate; ask me to erase your data where there's no overriding reason to keep it; ask me to restrict or object to how I use it; ask to receive your data in a portable format where applicable; and withdraw your consent at any time where I rely on it.
To exercise any of these, just contact me at hello@mindandburt.co.uk. I'll respond within one month, and there's normally no charge.
9. How I keep it safe
I take the security of your information seriously and use appropriate measures to protect it, including strong passwords and two-factor authentication, encryption where available, secure storage, restricted access and keeping software up to date. If a data breach occurs that's likely to risk your rights and freedoms, I'll report it to the ICO within 72 hours and let you know where required.
10. Cookies and my website
My website, www.mindandburt.co.uk, is hosted on Squarespace and may use cookies and similar technologies for essential functioning and, with your consent, analytics. You can manage cookies through the banner on the site and your browser settings.
11. Data held outside the UK
Some of the providers I use (for example, certain email, video-call or website tools) may store data on servers outside the UK. Where this happens, I take steps to ensure your data is protected by appropriate safeguards recognised under UK data protection law.
12. Changes to this notice
I may update this notice from time to time. The current version is always the one published on my website, dated at the bottom.
13. Concerns and complaints
If you have any concerns about how I handle your data, please contact me first and I'll do my best to help. You also have the right to complain to the ICO: www.ico.org.uk · Helpline 0303 123 1113.
Last updated 8 July 2026