Privacy policy

Last updated: 9 September 2026

Thriving Minds Collective Ltd (company number 16358249) trades as The Brighton Psychologists and sets out here, in plain language, what it does with your personal data through this site and through the process of becoming a client.

Two people hold your data, not one

The company itself controls the administrative record: your enquiry, the matching process, and the running of the booking system. It’s registered with the ICO under reference ZB902327 for that purpose.

Once matched, your psychologist keeps a separate clinical file covering assessment and treatment, governed by the standards the HCPC sets for the profession rather than by the company’s own admin systems. That file isn’t something the wider team can browse.

What gets collected

Get started, or any direct message to us, means giving your name, a contact method, and a description of what’s brought you to therapy, which will often touch on sensitive health information. We limit the questions to what’s genuinely needed to respond safely.

If therapy goes ahead, clinical notes on your sessions are kept by your psychologist, separately from the general enquiry record. We also run site analytics, covered in the cookie policy, which report usage patterns without identifying you.

Different activities rest on different lawful bases: delivering the therapy itself and answering enquiries, meeting professional obligations around safeguarding, and running analytics cookies where you’ve agreed to them. Consent can be pulled at any point. Health information specifically relies on the UK GDPR ground covering healthcare provision, alongside explicit consent where required.

Sharing

Your get-started responses reach the psychologist you’re paired with and nobody else as routine practice. Data isn’t sold, and it isn’t used to market anything to you. We might disclose something without asking first if there’s a genuine safety risk or a legal duty under HCPC rules, and we’ll tell you about it afterwards wherever that’s practical.

Keeping it safe

Systems holding personal and clinical data are encrypted, with access limited to people who need it. Nothing said on a video call is ever recorded. We review these protections periodically and take sensible steps against loss or unauthorised access.

Retention periods

  • Enquiry details: kept roughly two years past your last contact with us.
  • Clinical records: at least seven years from your final session, in line with HCPC and NHS practice.
  • Financial records: seven years, to satisfy HMRC.

What you’re entitled to ask for

Under UK GDPR you can request a copy of what we hold, ask for corrections, request deletion once we’re no longer obliged to retain something, object to or restrict certain processing, and ask for a portable copy of your data. Withdrawing consent doesn’t affect therapy already in progress. Email the address below for any of this, and expect a response inside a month.

No decisions made by machine alone

Nothing here is decided purely by automated processing where it would carry a legal or similarly serious effect on you. A person on our clinical team looks at every get-started submission before any decision on matching follows.

Cookies

Full detail on the cookies this site sets is in the separate cookie policy.

Getting in touch

Email [email protected] with questions about this policy or about how your data’s been handled, or raise a complaint directly with the Information Commissioner’s Office at ico.org.uk or 0303 123 1113, whether or not you’ve spoken to us first.

Keeping this current

Expect this page to change as the practice or the underlying law does, with the date at the top updated each time.