top of page

Privacy Policy - The Uplift Space

​

Effective Date: 01/06/2025
Last Updated: 01/06/2025

​

1. Introduction

​

At The Uplift Space, we are committed to respecting and protecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal information in connection with our psychological therapy and assessment services provided online.

We are based in the United Kingdom and operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy outlines how we process your data as a Data Controller, your rights, and how you can contact us with any concerns.

 

2. Who We Are

​

The Uplift Space is an independent clinical psychology service operating online to provide psychological therapy, consultation, and assessment. The Data Protection Officer (DPO) is [Insert Name], who can be contacted via [Insert email] or [Insert phone number].

We are registered with the Information Commissioner’s Office (ICO), registration number: [Insert ICO Number].

 

3. Why We Collect Your Information

​

We collect and process personal data for the following purposes:

  • To provide psychological therapy or assessments.

  • To fulfil our legal and regulatory obligations.

  • To manage client communications and appointments.

  • To comply with requests from insurers, solicitors, or other involved third parties (with appropriate consent).

  • To maintain professional records as required by regulatory and indemnity bodies.

For legal purposes, the lawful bases for processing your data may include:

  • Provision of health or social care (special category data).

  • Legal obligation, such as safeguarding or compliance with court orders.

  • Legitimate interests, such as business administration or assessment as an expert witness.

  • Consent, which can be withdrawn at any time unless legally required otherwise.

 

4. Information We Collect

​

We may collect the following categories of personal data:

Identifiable and Contact Information:

  • Full name

  • Address

  • Phone number

  • Email

  • Date of birth

  • Gender identity

Health and Clinical Information:

  • Medical and psychological history

  • Current psychological difficulties

  • Medications

  • Risk assessments

  • Session notes

  • Referral letters or reports

  • Information provided by insurers, solicitors, or referrers

Technical Data (if using our website or digital tools):

  • IP address

  • Browser type and device information

  • Cookies and usage analytics (see Section 7)

Financial Information (if applicable):

  • Invoices and payments

  • Bank details (only when necessary)

 

5. How We Store and Protect Your Information

​

We take the security of your data seriously. We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or misuse.

This includes:

  • Password-protected digital systems (e.g., encrypted Dropbox, secure practice management platforms)

  • Locked physical storage (for paper records, if applicable)

  • Encrypted and password-protected communications

  • Confidential contact storage (e.g., anonymised phone entries)

We advise clients not to share sensitive clinical information via SMS or unsecured emails.

 

6. Cookies and Website Data

​

If you use our website, we may use Cookies to improve functionality and analyse website usage. Cookies are small data files stored on your device to remember your preferences or identify repeated visits.

You can manage Cookies via your browser settings. Disabling Cookies may affect site functionality.

Our website may use Google Analytics or similar services to collect anonymised visitor data. These services are governed by their own privacy policies, and you may opt-out using their browser add-ons or settings.

 

7. Sharing Your Information

​

Your information is treated confidentially and only shared when necessary:

  • With your consent, to communicate with GPs, insurers, or other healthcare professionals.

  • With legal authorities, where there is a legal obligation or significant risk to life or safety.

  • For professional obligations, such as regulatory audits or clinical supervision (under strict confidentiality).

  • In court cases, if we are instructed as an expert witness.

Information is shared on a strict need-to-know basis, and all third parties must comply with data protection laws.

 

8. How Long We Keep Your Data

​

We retain data only for as long as necessary for legal, clinical, or professional requirements:

  • Therapy and private assessment records: kept for up to 7 years after the end of treatment (in line with HCPC/BPS guidelines).

  • Court-related reports: retained in accordance with legal obligations and solicitor instructions.

  • Administrative and financial data: retained up to 7 years for tax or accounting purposes.

Data is securely destroyed once no longer required.

 

9. Accessing or Updating Your Data

​

You have specific rights regarding your personal data. You may request a copy of the data we hold about you by submitting a Subject Access Request in writing. We will:

  • Confirm what data we hold and why.

  • Explain who it may be shared with.

  • Provide a copy of the data, unless exempt (e.g., legal privilege).

To make a request, please email: [Insert Email Address].

 

10. Complaints

​

If you have concerns about how we handle your data, please contact us first. We take privacy complaints seriously and will investigate thoroughly.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

 

11. Contact Us

​

If you have questions about this Privacy Policy or your data, contact:

The Uplift Space
Email: [Insert]
Phone: [Insert]
Address: [Insert, if applicable]

Please check this policy regularly as we may update it from time to time to comply with legal requirements or to reflect service changes. Continued use of our services indicates your acceptance of these terms.

bottom of page