Privacy Notice

Last Updated: 17 June 2026

Who I Am

I am Kirsty Pratt, trading as Kirsty Pratt Integrative Therapy, and I am the data controller responsible for the personal information you provide through this website and in connection with therapy services.

Contact details:

What Information I Collect

When you contact me through my website, by email, telephone, or in person, I may collect:

  • Name
  • Email address
  • Telephone number
  • Information you provide in your enquiry
  • Information relevant to arranging and providing therapy services

If you become a client, I may also collect information necessary for the provision of therapy, including assessment notes, session records, and administrative information.

Why I Collect Your Information

I collect and use your personal information to:

  • Respond to enquiries
  • Arrange consultations and appointments
  • Provide counselling and psychotherapy services
  • Maintain professional records
  • Manage payments and administration
  • Meet legal, regulatory, and professional obligations

Lawful Basis for Processing

Under UK data protection law, I process your personal information on the following bases:

  • Contract – where processing is necessary to provide therapy services requested by you.
  • Legitimate Interests – to respond to enquiries and manage my practice effectively.
  • Legal Obligation – where I am required to comply with legal or regulatory requirements.
  • Provision of Health Care – where special category health-related information is processed in connection with therapeutic services.

How Your Information Is Stored

I take reasonable steps to keep your personal information secure and confidential.

Information may be stored securely in electronic and/or paper records and is accessible only where necessary for the provision of services and the operation of my practice.

How Long I Keep Information

Enquiry information that does not lead to therapy services is normally retained for up to 12 months and then securely deleted.

Client records are retained in accordance with professional, insurance, and legal requirements, typically for 7 years after the end of therapy, or 7 years after a child client reaches age 18, unless a longer retention period is required.

Sharing Information

Your information will be treated confidentially.

I will not sell or share your personal information for marketing purposes.

Information may be shared where:

  • You have given consent.
  • It is necessary for professional supervision (anonymised wherever possible).
  • There is a legal obligation to disclose information.
  • There is a serious concern regarding your safety or the safety of others.
  • Disclosure is required by a court order or other lawful authority.

Where third-party service providers are used (for example, website hosting, email, or secure record-keeping systems), they are required to process information securely and in accordance with data protection laws.

Cookies

This website may use cookies that are necessary for its operation.

If analytics or other non-essential cookies are used, you will be provided with appropriate information and choices through the website's cookie settings.

Your Rights

Under UK data protection law, you have rights including:

  • The right to access your personal information.
  • The right to request correction of inaccurate information.
  • The right to request erasure in certain circumstances.
  • The right to restrict processing in certain circumstances.
  • The right to object to processing in certain circumstances.
  • The right to data portability where applicable.

To exercise any of these rights, please contact me using the details above.

Data Protection Complaints

If you have any concerns about how I handle your personal information, please get in touch with me at therapy@kirsty-pratt.com in the first instance so that I can try to resolve the issue.

I will acknowledge and investigate privacy-related complaints and respond within 30 days.

If you remain dissatisfied, you have the right to lodge a complaint with the UK's data protection regulator:

Information Commissioner's Office (ICO)

Changes to This Privacy Notice

I may update this Privacy Notice from time to time. Any changes will be published on this page, and the latest version will always be available on this website.