August 01, 2025
Therachange Ltd (“Therachange”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy.
This policy (together with our Website Terms of Use and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read it carefully to understand our practices regarding your personal data and how we will treat it. By visiting www.therachange.co.uk (the “Site”) or using our services, you accept and consent to the practices described in this policy.
Data Controller. For the purposes of the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and any other applicable data protection law, the data controller is:
Therachange Ltd
Company number: 16570556
Registered office: 1st Floor, 1–9 Castle Street, Hinckley, England, LE10 1DA
Contact: dataprotection@therachange.co.uk
ICO Registration. If applicable, our ICO registration number is: [insert ICO registration number].
Links to third-party sites. Our Site may contain links to external websites. Those websites are not covered by this policy. Please check their privacy policies before submitting any personal information. We’re not responsible for the content, function or data practices of those external sites.
“Personal data” means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect and process the following categories of personal data:
Information you provide by filling in forms on our Site or by corresponding with us by phone, email, video, chat or otherwise. This includes when you create an account, complete our online questionnaire/screeners, book or attend sessions, subscribe to updates, take surveys, or report a problem.
Examples: name, contact details (email, telephone), date of birth, address, your goals for therapy, preferences, feedback, and any other information you voluntarily provide.
In order to provide therapy/counselling, we may collect special category data that you share with us, such as information regarding your mental health history, current symptoms, medication (if any), relevant medical information, lifestyle factors, relationships and goals for therapy. We process this information with additional safeguards (see “Special Category Data & Legal Basis” below).
When you visit the Site we may automatically collect certain technical information for performance, security and analytics:
We may receive information about you from service providers that support our operations (e.g., payment processors, analytics providers, video meeting tools, booking systems, identity verification tools), advertising or social platforms (where you consented), or referrers (e.g., a GP or other clinician) where appropriate and lawful.
Accuracy. It is important that your personal data is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Our Site uses cookies and similar technologies to distinguish you from other users, help the Site function, improve performance and personalise content.
You can control cookies through your browser settings. Blocking some cookies may impact your experience or limit parts of the Site. See our Cookie Notice (if separate) for details.
We only use your personal data when the law allows us to. We rely on one or more of the following legal bases:
to register you as a client, provide therapy sessions, take payments, manage bookings, and deliver customer support.
for certain activities like marketing communications and processing special category data where explicit consent is required. You can withdraw consent at any time.
to run and improve our services (e.g., analytics, safeguarding our systems, client support), provided your rights do not override those interests.
to comply with applicable laws and regulatory requirements (e.g., maintaining clinical records, responding to lawful requests).
in rare cases, to protect you or another person from serious harm.
Quality assurance & supervision. With your knowledge, anonymised or minimally necessary case information may be discussed in clinical supervision (a professional standard in therapy) to ensure quality of care.
Because we provide therapy, we may process health-related information you share with us. We generally rely on:
We only collect the minimum relevant information needed to provide care and safeguard you and others. You may withdraw consent, but doing so may affect our ability to provide services.
Session recordings. We do not routinely record sessions. If a session is ever recorded (e.g., for training/quality purposes), this will only occur with your explicit, prior consent, and the recording will be handled as part of your confidential record with strict access controls.
We may use light-touch automation (e.g., our online questionnaire) to suggest suitable therapy approaches. Any such suggestions do not replace clinical judgement. We do not make solely automated decisions that produce legal or similarly significant effects about you without human involvement.
We only share your personal data with trusted recipients and only to the extent necessary:
We do not sell your personal data.
Where we transfer data outside the UK, we ensure appropriate safeguards are in place (e.g., UK IDTA/Addendum, adequacy decisions or equivalent contractual protections).
We use technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. While no system is 100% secure, we implement industry-standard safeguards, restrict access to those with a need to know, encrypt transmissions where appropriate, and train our team on data protection.
We keep personal data only as long as necessary for the purposes set out in this policy or as required by law, regulation, professional or insurance obligations.
We may anonymise data (so it can no longer identify you) for research/statistical purposes, in which case we may use this information indefinitely without further notice.
Under data protection law you have rights, including to:
To exercise these rights, please contact dataprotection@therachange.co.uk. We may need to verify your identity. There is no fee for most requests, and we aim to respond within one month.
Our services are primarily for adults. Where we provide therapy to young people, we will obtain appropriate consent/authority and apply additional safeguards.
We may update this policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Please check back regularly.
Data Controller: Therachange Ltd
Registered office: 1st Floor, 1–9 Castle Street, Hinckley, England, LE10 1DA
Email: dataprotection@therachange.co.uk
Postal: FAO: Data Protection Lead, Therachange Ltd, 1st Floor, 1–9 Castle Street, Hinckley, England, LE10 1DA
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. See ic o.org.uk for details.
