Privacy Policy

Roisin Nicholson Therapy (“we,” “us,” or “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store and protect your information when you visit our website (https://www.babylosstherapist.com), use our services, or interact with us.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable data protection laws.

The data controller responsible for your personal data is:

We may collect and process the following categories of personal data:

3.1 Information you provide directly

• Name (first and last) when joining the waitlist or making an enquiry
• Email address
• Phone number (if provided)
• Country of residence
• Insurance provider information (if provided)
• Any information you share during therapy sessions
• Correspondence via email or contact forms

3.2 Information collected automatically

• Website usage data via Vercel Analytics (anonymised, no cookies)
• Device type and browser information
• Pages visited and time spent on site
• Referring website or source

We use your personal data for the following purposes:

• To manage the therapy waitlist and contact you when a space becomes available
• To provide and manage therapy services
• To communicate with you about appointments and your care
• To send you information you have requested (e.g. course details)
• To improve our website and services
• To comply with legal and professional obligations

We process your personal data under the following legal bases:

• Consent — when you submit your details via the waitlist form or subscribe to communications
• Contractual necessity — to provide therapy services you have engaged
• Legitimate interest — to improve our services and respond to enquiries
• Legal obligation — to comply with professional and regulatory requirements

We use the following third-party services to operate our business. Your data may be shared with these providers solely for the purposes described:

We retain your personal data only for as long as is necessary for the purposes set out in this policy:

• Waitlist data — retained until you are contacted and either begin therapy or ask to be removed
• Therapy records — retained for a minimum of 7 years after the end of the therapeutic relationship, in line with BACP and insurance requirements
• Email correspondence — retained for as long as necessary for ongoing communication
• Website analytics — anonymised data retained by Vercel in accordance with their data retention policy

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data (subject to legal obligations)
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — request your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@babylosstherapist.com. We will respond within 30 days.

This website uses minimal cookies and local storage:

• Banner dismissal preference — stored in your browser's local storage to remember if you have dismissed the waitlist banner. No personal data is collected.
• We do not use tracking cookies, advertising cookies, or any third-party cookies.
• Vercel Analytics operates without cookies and does not collect personally identifiable information.

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data, including:

• SSL/TLS encryption on all website communications
• Encrypted video platform for therapy sessions
• Secure, password-protected storage of client records
• Limited access to personal data on a need-to-know basis
• Regular review of data protection practices

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):