Privacy Policy

The Thought Garden Ltd

Last updated: 30.12.2025

The Thought Garden Ltd provides psychotherapy services.
We are home-based and registered with the Information Commissioner’s Office (ICO).

Contact email: enquiries@thethoughtgarden.co.uk

For the purposes of data protection law, The Thought Garden Ltd is the data controller responsible for your personal information.

Personal data is handled in accordance with:

• The UK General Data Protection Regulation (UK GDPR)
• The Data Protection Act 2018
• The ethical and professional standards of the British Association for Behavioural and Cognitive Psychotherapies (BABCP)
• The ethical and professional standards of the British Psychoanalytic Council (BPC)

These standards inform how confidentiality, record keeping, safeguarding, and data protection are managed.

We collect personal information that you choose to provide, including:

• Name
• Email address
• Phone number
• Information shared via contact forms or email correspondence
• Information relevant to the provision of psychotherapy services

We do not provide services to minors and do not knowingly collect personal data from individuals under the age of 18.

Personal data is collected through:

• Website contact forms
• Email communication
• Direct contact related to psychotherapy services

Payment-related data is collected separately by a third-party payment provider (see Section 9).

Personal data is collected and processed for the purposes of:

• Responding to enquiries
• Providing psychotherapy services
• Managing appointments and professional communication
• Meeting legal, ethical, and safeguarding obligations

Under UK GDPR, the lawful bases for processing include:

• Consent
• Contract (to provide psychotherapy services)
• Legal obligation
• Vital interests, particularly in safeguarding or risk-related situations

All information shared in the context of psychotherapy is treated as confidential.

Confidentiality may only be broken where:

• There is serious risk of harm to the client or others
• Safeguarding concerns arise
• Disclosure is required by law
• Disclosure is required in accordance with professional and ethical obligations under BABCP or BPC standards

Any disclosure will be limited to the minimum information necessary and, where appropriate, discussed with the client.

Clinical records are kept in accordance with legal, professional, and ethical requirements.

• Records are factual, relevant, and limited to information necessary for the provision of psychotherapy
• Data minimisation principles are applied
• Reflective material and supervision-related content is anonymised wherever possible

Records are retained in line with professional, legal, and ethical requirements and are securely destroyed when no longer required.

Personal data is stored securely on a password-protected device.

Appropriate technical and organisational measures are in place to protect personal data from unauthorised access, loss, or misuse. Access to personal data is restricted to authorised use only.

While every effort is made to ensure data security, no method of electronic storage can be guaranteed to be completely secure.

Personal information is not shared outside of The Thought Garden Ltd, except in the following circumstances:

• Safeguarding or risk-related situations
• Legal or regulatory obligations
• Professional and ethical duties under BABCP or BPC frameworks

The Thought Garden Ltd engages in regular clinical supervision in accordance with BABCP and BPC requirements.
Client material discussed in supervision is anonymised wherever possible.

Payments are processed by Monzo, a third-party payment provider. Monzo processes payment information in accordance with its own privacy and security policies. The Thought Garden Ltd does not store full payment card details.

The Thought Garden Ltd maintains a professional presence on:

• Instagram
• Facebook
• TikTok

Any interaction with these platforms is subject to their respective privacy policies. Therapeutic communication does not take place via social media platforms.

This website is hosted by GoDaddy.

We do not knowingly use cookies to collect personal data directly. However, GoDaddy or embedded services (such as social media links) may use essential or functional cookies necessary for website operation and performance.

Users can manage or disable cookies through their browser settings.

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request erasure of your data (where legally and ethically permissible)
• Restrict or object to processing
• Withdraw consent at any time

To exercise your rights, please contact:
enquiries@thethoughtgarden.co.uk

If you have concerns about how your data is handled, please contact us in the first instance.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

This Privacy Policy may be updated from time to time. Any changes will be published on this page with an updated revision date.

The Thought Garden Ltd

The Thought Garden Ltd is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.  Personal data is processed in line with UK GDPR, the Data Protection Act 2018, and the ethical and professional standards of the British Association for Behavioural and Cognitive Psychotherapies (BABCP) and the British Psychoanalytic Council (BPC). 

• We are registered with the Information Commissioner’s Office (ICO)
   
• Personal data is processed lawfully, fairly, and transparently
   
• Data is collected only for specified and legitimate purposes
   
• Data is limited to what is necessary for providing psychotherapy
   
• Appropriate security measures are in place to protect personal data
   

Personal data is stored securely on password-protected devices and is not shared outside of The Thought Garden Ltd unless required for safeguarding, legal obligations, or payment processing.

For any data protection enquiries, please contact:
enquiries@thethoughtgarden.co.uk