Privacy Policy

Pemberton Psychotherapy
Website: www.pembertonpsychotherapy.co.uk
Email: info@pembertonpsychotherapy.co.uk
Last updated: 26 August 2026

1. Introduction
Pemberton Psychotherapy respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, enquire about our services or become a client.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who is responsible for your information?
The data controller responsible for your personal information is:
Pemberton Psychotherapy
Email: info@pembertonpsychotherapy.co.uk
If you have any questions about how your information is handled, please contact us at info@pembertonpsychotherapy.co.uk.
3. Information we may collect
Depending on how you interact with Pemberton Psychotherapy, we may collect:

Your name
Email address
Information provided when making an enquiry
Appointment and booking information
Payment and invoicing information, where applicable
Information you provide during therapy or assessment
Information relating to your mental health, wellbeing and personal circumstances
Any other information you voluntarily provide to us

Some information provided in connection with psychotherapy may constitute special category personal data, particularly information relating to your physical or mental health.
4. How we use your information
We may use your personal information to:

Respond to enquiries and requests for information
Arrange and manage appointments
Provide psychotherapy and related services
Communicate with you about appointments or services
Maintain appropriate client records
Process payments and issue invoices, where applicable
Provide information you have requested
Manage and administer the practice
Maintain the security and functionality of our website
Comply with legal, regulatory and professional obligations
Deal with complaints or concerns
Protect the safety and wellbeing of clients and others where necessary and appropriate

5. Our lawful basis for processing information
Under UK data protection law, we must have a lawful basis for collecting and using personal information.
Depending on the circumstances, we may rely on one or more of the following:

Contract: where processing is necessary to provide services to you or take steps at your request before entering into an agreement.
Legal obligation: where we are required to process information to comply with a legal or regulatory obligation.
Legitimate interests: where processing is necessary for the legitimate operation and management of the practice, provided that these interests are not overridden by your rights.
Consent: where you have given specific consent for us to use your information for a particular purpose.

Where we process health or mental health information, additional conditions apply because this information may constitute special category data. We will only process such information where permitted by applicable data protection law and where an appropriate condition for processing special category data applies.
6. Confidentiality and therapy information
We understand that information shared during psychotherapy can be highly personal and sensitive.
We will treat information you provide to us confidentially and will take appropriate steps to protect your information.
There may, however, be circumstances where confidentiality needs to be limited or information shared with another person or organisation. This may include circumstances where:

You give your consent for information to be shared;
We are legally required to disclose information;
Disclosure is necessary to protect you or another person from serious harm;
Disclosure is necessary to protect a child or vulnerable person;
Disclosure is required by a court or other lawful authority; or
Disclosure is otherwise permitted or required under applicable law or professional requirements.

Where appropriate and possible, we will discuss any necessary disclosure with you.
7. Who we may share your information with
We do not sell your personal information.
Where necessary and lawful, we may share relevant information with:

Healthcare professionals or other professionals involved in your care, where appropriate and permitted;
Professional advisers;
IT, website hosting and technical service providers;
Appointment booking or practice management providers;
Payment service providers, where applicable;
Accountants or other professional service providers;
Legal or regulatory authorities where we are required to do so; and
Emergency services or other appropriate organisations where necessary to protect someone's safety.

We only share information that is necessary and appropriate for the relevant purpose.
Where we use third-party service providers to process personal information on our behalf, we take reasonable steps to ensure appropriate data protection and confidentiality arrangements are in place.
8. How we protect your information
We take reasonable and appropriate technical and organisational measures to protect your personal information from:

Unauthorised access
Accidental loss
Destruction
Misuse
Alteration
Unauthorised disclosure

Access to client information is restricted to those who need it for legitimate purposes.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
9. How long we keep your information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, regulatory, professional, accounting or insurance requirements.
Client records may need to be retained for a longer period than general website enquiries.
The exact retention period may depend on the type of information and the circumstances in which it was collected.
When information is no longer required, it will be securely deleted, destroyed or anonymised where appropriate.
10. Website cookies
Our website may use cookies and similar technologies.
Cookies are small files placed on your device that can help a website operate correctly, remember preferences and understand how visitors use the website.
Some cookies may be essential for the website to function, while others may be used for analytics, functionality or other purposes.
Where required by law, we will ask for your consent before placing non-essential cookies on your device.
You can manage or disable cookies through your browser settings and, where applicable, through the cookie settings provided on our website.
11. Third-party websites
Our website may contain links to websites operated by third parties.
If you follow a link to another website, that website will have its own privacy policy and terms. Pemberton Psychotherapy is not responsible for the privacy practices or content of third-party websites.
We recommend checking the privacy policy of any third-party website before providing personal information.
12. Your data protection rights
Under applicable data protection law, you may have rights including:

The right to be informed about how your information is used;
The right to request access to the personal information we hold about you;
The right to request correction of inaccurate or incomplete information;
The right to request deletion of your information in certain circumstances;
The right to request restriction of processing in certain circumstances;
The right to object to certain processing;
The right to data portability in certain circumstances; and
The right to withdraw consent where we rely on consent as our lawful basis.

These rights are not absolute and may be subject to legal exemptions or other conditions.
If you wish to exercise any of your rights, please contact us at:
info@pembertonpsychotherapy.co.uk
We may need to verify your identity before responding to a request.
13. How to make a complaint
If you have concerns about how we have handled your personal information, please contact us first at:
info@pembertonpsychotherapy.co.uk
We will endeavour to address your concerns.
You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal information has been handled unlawfully.
Further information about making a complaint is available on the ICO website.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, website, legal requirements or how we process personal information.
Any updates will be published on this page with the revised "Last updated" date.
We recommend checking this page periodically to ensure you are aware of any changes.
15. Contact us
If you have any questions about this Privacy Policy or how Pemberton Psychotherapy handles your personal information, please contact:
Pemberton Psychotherapy
Email: info@pembertonpsychotherapy.co.uk

Your name

Email address

Information provided when making an enquiry

Appointment and booking information

Payment and invoicing information, where applicable

Information you provide during therapy or assessment

Information relating to your mental health, wellbeing and personal circumstances

Any other information you voluntarily provide to us

Some information provided in connection with psychotherapy may constitute special category personal data, particularly information relating to your physical or mental health. 4. How we use your information We may use your personal information to:

Respond to enquiries and requests for information

Arrange and manage appointments

Provide psychotherapy and related services

Communicate with you about appointments or services

Maintain appropriate client records

Process payments and issue invoices, where applicable

Provide information you have requested

Manage and administer the practice

Maintain the security and functionality of our website

Comply with legal, regulatory and professional obligations

Deal with complaints or concerns

Protect the safety and wellbeing of clients and others where necessary and appropriate

5. Our lawful basis for processing information Under UK data protection law, we must have a lawful basis for collecting and using personal information. Depending on the circumstances, we may rely on one or more of the following:

Contract: where processing is necessary to provide services to you or take steps at your request before entering into an agreement.

Legal obligation: where we are required to process information to comply with a legal or regulatory obligation.

Legitimate interests: where processing is necessary for the legitimate operation and management of the practice, provided that these interests are not overridden by your rights.

Consent: where you have given specific consent for us to use your information for a particular purpose.

You give your consent for information to be shared;

We are legally required to disclose information;

Disclosure is necessary to protect you or another person from serious harm;

Disclosure is necessary to protect a child or vulnerable person;

Disclosure is required by a court or other lawful authority; or

Disclosure is otherwise permitted or required under applicable law or professional requirements.

Where appropriate and possible, we will discuss any necessary disclosure with you. 7. Who we may share your information with We do not sell your personal information. Where necessary and lawful, we may share relevant information with:

Healthcare professionals or other professionals involved in your care, where appropriate and permitted;

Professional advisers;

IT, website hosting and technical service providers;

Appointment booking or practice management providers;

Payment service providers, where applicable;

Accountants or other professional service providers;

Legal or regulatory authorities where we are required to do so; and

Emergency services or other appropriate organisations where necessary to protect someone's safety.

Unauthorised access

Accidental loss

Destruction

Misuse

Alteration

Unauthorised disclosure

The right to be informed about how your information is used;

The right to request access to the personal information we hold about you;

The right to request correction of inaccurate or incomplete information;

The right to request deletion of your information in certain circumstances;

The right to request restriction of processing in certain circumstances;

The right to object to certain processing;

The right to data portability in certain circumstances; and

The right to withdraw consent where we rely on consent as our lawful basis.

Some information provided in connection with psychotherapy may constitute special category personal data, particularly information relating to your physical or mental health.
4. How we use your information
We may use your personal information to:

5. Our lawful basis for processing information
Under UK data protection law, we must have a lawful basis for collecting and using personal information.
Depending on the circumstances, we may rely on one or more of the following:

Where appropriate and possible, we will discuss any necessary disclosure with you.
7. Who we may share your information with
We do not sell your personal information.
Where necessary and lawful, we may share relevant information with: