Last Updated: 30 October 2025

1. Introduction

This privacy policy explains how Thrive In Therapy (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit our website, (the “Website”), or use our therapy services. We are committed to protecting your privacy and processing your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy outlines our practices concerning the data we collect from you, or that you provide to us, and how it will be processed. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

2. Who We Are (Data Controller)

For the purpose of the UK GDPR, the data controller is Lauren, the therapist at Thrive In Therapy.
If you have any questions about this privacy policy or our data protection practices, you can contact us at:
•Email:
•Phone: 07753241524
Our registered address is in Fleet, Hampshire, UK.

3. Information We Collect

We may collect and process the following data about you:
Information you give us:
•Contact Information: When you contact us via our contact form, email, or phone, we may collect your name, email address, phone number, and any other information you provide in your message.
•Session Information: During the course of therapy, we will collect information about your mental and physical health. This is considered “special category data” under the UK GDPR and is treated with the highest level of confidentiality.
•Payment Information: If you pay for our services by bank transfer or card, we will process your payment details. Please note that for card payments, we use a third-party payment processor and do not store your full card details.
Information we collect automatically:
•Cookies and Website Usage Data: When you visit our website, we may automatically collect information about your device and your visit, such as your IP address, browser type, operating system, referral source, length of visit, and pages viewed. This information is collected using cookies and similar technologies. You can find more information about this in our Cookie Policy section below.

4. How We Use Your Information

We use the information we collect in the following ways:
•To provide our services: To schedule and provide therapy sessions, and to communicate with you about your appointments and our services.
•To process payments: To process payments for our services.
•To improve our website: To analyze how our website is used and to improve the user experience.
•To comply with legal and professional obligations: To comply with applicable laws, regulations, and professional standards, including those set by the BACP.
•For marketing purposes: With your consent, we may use your contact information to send you information about our services. You can opt-out of these communications at any time.

5. Legal Basis for Processing Your Information

Under the UK GDPR, we must have a legal basis for processing your personal data. The legal bases we rely on are:
•Consent: We will ask for your consent to collect and process your information for specific purposes, such as sending you marketing materials or using non-essential cookies. You can withdraw your consent at any time.
•Contract: We will process your personal data to fulfill our contractual obligations to you, such as providing you with therapy services.
•Legal Obligation: We may need to process your personal data to comply with our legal and professional obligations, such as maintaining clinical records as required by the BACP.
•Legitimate Interests: We may process your personal data for our legitimate interests, such as improving our website and services. We will only do this if our interests do not override your rights and freedoms.
For special category data, such as your health information, we will rely on the following additional legal bases:
•Explicit Consent: We will ask for your explicit consent to process your health data for the purpose of providing you with therapy.
•Health or Social Care: We may process your health data for the provision of health or social care or treatment.

6. Data Sharing and Disclosure

We take your privacy very seriously and will not share your personal information with third parties except as described in this privacy policy or when we have your explicit consent. We may disclose your personal information to:
•Third-party service providers: We may share your information with third-party service providers who perform services on our behalf, such as payment processors, website hosting providers, and analytics providers. These service providers are only given the information they need to perform their services and are contractually obligated to protect your information.
•Professional bodies: We may be required to share information with the BACP or other professional bodies in the event of a complaint or for audit purposes.
•Legal and regulatory authorities: We may disclose your information if required to do so by law or in response to a valid request from a law enforcement or other government agency.
Confidentiality of Therapy Sessions:
All therapy sessions are confidential. However, there are some limited circumstances in which we may be legally or ethically required to break confidentiality. These include:
•If you pose a risk of serious harm to yourself or others.
•If we become aware of a child or vulnerable adult who is at risk of harm.
•If we are required to do so by a court of law.
We will always try to discuss any potential breach of confidentiality with you in advance, unless doing so would increase the risk of harm.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. In line with BACP guidelines, we are required to keep client records for a minimum of 7 years after the end of therapy.

9. Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:
•The right to be informed: You have the right to be informed about how we collect and use your personal data. This privacy policy is intended to provide you with this information.
•The right of access: You have the right to access the personal data we hold about you. This is commonly known as a “data subject access request”.
•The right to rectification: You have the right to have inaccurate personal data rectified, or completed if it is incomplete.
•The right to erasure: You have the right to have your personal data erased, also known as the “right to be forgotten”. This right is not absolute and only applies in certain circumstances.
•The right to restrict processing: You have the right to request the restriction or suppression of your personal data. This is not an absolute right and only applies in certain circumstances.
•The right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
•The right to object: You have the right to object to the processing of your personal data in certain circumstances.
•Rights in relation to automated decision making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
If you wish to exercise any of these rights, please contact us at .

10. Cookie Policy

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.
We use the following cookies:
•Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website.
•Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
•Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you and remember your preferences.
•Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests.
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

12. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at .
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: