PRIVACY POLICY

 

I am Danielle Christie Greene a qualified Psychotherapist and founder of PsycheSpace, providing online psychotherapy services to clients across the UK. I am the Data Controller, responsible for how your personal information is collected, used, stored, and protected.

If you have questions about this notice, email: info@psychespace.co.uk

​

2. The Information I Collect

I collect and process the following types of personal data:

• Identity information — name, date of birth, contact details

• Health information — relevant medical history, neurodivergence, chronic illness, ME/CFS‑related information

• Session information — notes, assessments, communications

• Website data — IP address, cookies, analytics (non‑identifiable)

• Administrative data — invoices, payment records, appointment history

This includes special category data, which requires enhanced protection under UK GDPR.

​

3. Lawful Bases for Processing

I process your data under:

• Contract — to provide therapy sessions you request

• Consent — for specific optional activities (e.g., contacting your GP)

• Legal obligation — record‑keeping, safeguarding, DUAA complaint handling

• Vital interests — if there is risk of serious harm

• Legitimate interests — secure practice administration

• ​

4. How Your Data Is Used

Your data is used to:

• Provide psychotherapy sessions

• Maintain accurate clinical records

• Manage appointments, billing, and communication

• Ensure safety and safeguarding

• Comply with legal and professional obligations (NCPS/ICO)

I do not use your data for marketing.

​

5. How Your Data Is Stored & Protected

I use encrypted systems and secure platforms:

• Encrypted devices (BitLocker/FileVault)

• Secure practice software (e.g., Square, Wix, email encryption)

• Password‑protected files

• Restricted access — only me as the practitioner

• Secure cloud storage located in the UK/EU

​

6. How Long Your Data Is Kept

Therapy records are kept for 7 years after your final session (standard UK clinical retention). DUAA‑related complaint records must be kept for 6 years.

​

7. Sharing Your Data

I only share your data when:

• You give explicit consent

• Required for safeguarding or legal reasons

• Required by insurers or professional bodies

• Required by law (e.g., court order)

I do not sell or share your data with third‑party marketers.

​

8. Your Rights

Under UK GDPR, you have the right to:

• Access your data

• Request corrections

• Request deletion (where legally possible)

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

 

9. NEW: How to Make a Data Protection Complaint (DUAA 2025 Requirement)

If you are unhappy with how your personal data has been handled, you must contact me first. This is now required under the Data (Use and Access) Act 2025.

​

How to complain

You can complain by:

• Emailing: info@psychespace.co.uk

​

What happens next

• I will acknowledge your complaint within 30 days

• I will aim to resolve your complaint within 3 months

• I will keep a record of your complaint for 6 years (legal requirement)

​

If you are still unhappy

You can escalate your complaint to the Information Commissioner’s Office (ICO): https://www.ico.org.uk

​

​

10. Cookies & Website Analytics

My website uses essential cookies for security and functionality. Analytics cookies (if enabled) are anonymised and optional.

You can manage cookie preferences through your browser settings.

​

11. Children’s Data

I only work with clients aged 17+ unless agreed with parents/guardians. Parental consent is required for under‑16s.

​

12. Updates to This Privacy Notice

This notice is reviewed annually and updated to reflect changes in law, including DUAA 2025.

​

Last updated: July 2026