Privacy policy

Who we are

This website is operated by [LEGAL ENTITY NAME], a phobia-therapy practice ('we', 'us'). Our registered address is [REGISTERED ADDRESS] and our contact email for privacy questions is [PRIVACY CONTACT EMAIL].

We are the data controller for the personal information described in this policy. [CONFIRM ICO REGISTRATION AND NUMBER, IF THE PRACTICE HOLDS ONE.]

What this policy covers

This policy covers this website and the consultation request form on it.

[CONFIRM whether it should also cover consultations, client records, emails and any other tools the practice uses. If it should, this section needs to say so and the rest of the policy checked against it.]

What we collect

When you request a consultation, this site asks for your first name, your email address, and a short note about what you would like help with.

What you write may be about your health, which UK data protection law treats as special category information. [CONFIRM the lawful basis and any additional condition relied on before this is published — that is a decision for the practice, not the website.]

We collect limited technical information about how the site is used, and only if you accept analytics. See 'Cookies and analytics'.

How we use your information

We use the details you submit to arrange your consultation.

[CONFIRM any other uses — for example follow-up emails, invoicing or marketing — and the lawful basis for each.]

Cookies and analytics

This site measures nothing until you choose. The page loads with Google Analytics storage denied, and no analytics cookie or identifier is set before you accept.

If you accept, we use Google Analytics 4, delivered through Google Tag Manager, to understand how the site is used — for example which pages are read. If you reject, or before you choose, nothing is measured.

Your choice is stored in your own browser (under the name ptf-consent), not on our servers, and you can change it at any time using 'Cookie settings' in the footer of every page.

[CONFIRM the exact cookies and identifiers Google sets once the Tag Manager container is configured, together with their lifetimes and whether any advertising features are enabled.]

Who we share it with

Booking. The consultation form hands you to a third-party scheduling service to pick a time. [CONFIRM the provider (thought to be Calendly) and the information it collects.]

Hosting and content. This site is hosted by Cloudflare and its content is managed in Sanity. [CONFIRM the full processor list, the agreements in place, and whether any data is transferred or stored outside the UK.]

Analytics. Google, and only if you accept analytics.

How long we keep it

[CONFIRM how long enquiries, consultation details and any analytics data are kept, and when they are deleted.]

Your rights

Under UK data protection law you can ask to see the information we hold about you, ask us to correct or delete it, object to how it is used, or ask us to restrict its use. Write to [PRIVACY CONTACT EMAIL] and we will respond within the time the law allows.

[CONFIRM any limits — for example records the practice must keep — and whether this section should be expanded by a legal reviewer.]

Complaints

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk. We would rather have the chance to put it right first, so please contact [PRIVACY CONTACT EMAIL].

Changes to this policy

We will update this page when anything changes. [SET LAST-UPDATED DATE ON APPROVAL.]