Privacy policy

Last updated: 9 September 2026

This site is operated under the trading name The Bromley Psychologists by Thriving Minds Collective Ltd (Company No. 16358249). This policy sets out, in plain language, what personal data we gather when you use the site or contact us, what happens to it afterwards, and the rights available to you.

Who controls what

Two separate parties handle your data here. Thriving Minds Collective Ltd is the controller for the administrative side of things: your initial enquiry, matching you with a psychologist, and the running of the site and booking process. Our registration with the Information Commissioner’s Office is ZB902327.

Once you’ve been matched, your psychologist keeps a separate clinical record of your assessment and treatment, governed by the standards the Health and Care Professions Council sets for the profession. Those notes belong to your treating psychologist and are not folded into one shared administrative file.

Information we collect

When you fill in our get-started questionnaire, or contact us by email, we ask for your name, a way of reaching you, and whatever detail you choose to give about what has brought you to us, which can include sensitive information about your mental health. We only ask what’s needed to respond safely and appropriately.

Should therapy go ahead, your psychologist maintains their own clinical notes covering assessment, treatment and progress, kept apart from the general enquiry record.

The site also uses analytics tools, described in full in our cookie policy, which report on how the site is used without identifying individual visitors.

Why we’re allowed to process it

Different lawful bases apply to different activities: responding to your enquiry and providing therapy, meeting our professional and safeguarding duties, and, where you’ve agreed, running optional analytics cookies. You can withdraw consent-based processing at any point. Anything relating to health is processed under the specific UK GDPR provision covering healthcare, together with your explicit consent where that’s also required.

Who sees it

Your get-started answers go to the psychologist you’re matched with and are not shared any further as a matter of routine. We don’t sell personal data and don’t use it to market to you. In limited circumstances we may need to disclose information without asking first, such as a serious risk to someone’s safety or a legal duty under HCPC rules, and we’ll tell you about this beforehand wherever that’s practical.

Keeping it secure

Both administrative and clinical data are held on encrypted systems, accessible only to those who need it to do their job. Video sessions are encrypted throughout and are never recorded. We review our security arrangements periodically and take reasonable steps to guard against loss, misuse or unauthorised access.

How long we keep it

Contact and enquiry details are kept only as long as needed to respond to you, typically no more than two years after your last contact with us. Clinical records are retained for longer, in line with HCPC and NHS good-practice guidance, usually for at least seven years from your last session. Financial records are kept for seven years to meet HMRC requirements.

Your rights

Under UK GDPR you can ask for a copy of the data we hold about you, request corrections, ask for deletion where we’re not required to retain it, restrict or object to particular uses, and request your data in a portable format. Consent can be withdrawn at any time without affecting therapy already underway. To use any of these rights, email us at the address below and we’ll respond within a month.

No automated decision-making

We don’t rely on automated processing alone for decisions that carry a legal or similarly significant effect on you. A member of our clinical team reviews every get-started questionnaire personally before any decision is made about matching or next steps.

A note on cookies

A small number of cookies operate on this site. Our cookie policy covers exactly what they do.

Questions or complaints

Send any question about this policy, or about how your data has been handled, to [email protected]. You’re also entitled to complain to the Information Commissioner’s Office at any time, whether or not you’ve contacted us first, via ico.org.uk or 0303 123 1113.

Updates to this policy

This page will be revised as our practice or the relevant law changes, with each revision dated at the top.