Privacy Policy

Rachel Turnbull CBT ("we", "I", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store and protect your information when you visit our website or use our services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Rachel Turnbull is the data controller responsible for your personal data.

Contact Form Submissions

When you use our contact form, we collect your name, email address, phone number (if provided), and the content of your message.

Technical Data

We may automatically collect certain technical information including your IP address, browser type and version, time zone setting, and operating system.

Usage Data

We may collect information about how you use our website, including pages visited and time spent on the site.

We use your personal data for the following purposes:

• To respond to your enquiries submitted through the contact form
• To provide information about our CBT services
• To arrange and manage therapy sessions
• To improve our website and user experience
• To comply with legal and regulatory obligations

We process your data under the following legal bases:

• Consent: When you submit our contact form, you consent to us processing your data to respond to your enquiry.
• Legitimate Interest: We may process data where it is in our legitimate business interest to do so, provided your rights do not override these interests.
• Contractual Necessity: Processing may be necessary for the performance of a contract for therapy services.
• Legal Obligation: We may process data to comply with legal requirements.

Your personal data is stored securely and we take appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure or destruction.

Contact form submissions are retained for a maximum of 12 months after your last interaction, unless you request earlier deletion or we are required to retain them for legal purposes.

This website uses minimal cookies. We use a localStorage preference to remember your cookie consent choice. This is not technically a cookie but operates similarly.

We do not use advertising cookies, tracking cookies, or any third-party analytics cookies.

Under the UK GDPR, you have the following rights:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate personal data.
• Right to Erasure: You can request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request your data in a commonly used, machine-readable format.
• Right to Object: You can object to processing based on legitimate interests.
• Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details below.

This website uses the following third-party services:

• Google Fonts: We use Google Fonts to display typography on our website. Google may collect your IP address when fonts are loaded. For more information, see Google's Privacy Policy.
• Microsoft Teams: Therapy sessions are conducted via Microsoft Teams. Microsoft's privacy practices are governed by their own privacy policy.

We do not sell, trade, or otherwise transfer your personal data to third parties for marketing purposes.

While we provide therapy services for children and adolescents, any contact form submissions regarding minors should be made by a parent or guardian. We do not knowingly collect personal data from children under 13 without parental consent.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.