Privacy Policy
1. Who This Policy Applies To
This policy is relevant to:
- Therapy clients (current, past, or potential)
- Media professionals or organisations contacting Dr Trent for collaborations or comment
2. Data Controller
Dr Marianne Trent is the Data Controller and is registered with the Information Commissioner’s Office (ICO) in the UK.
3. What Personal Data Is Collected?
For Therapy Clients:
- Name and date of birth
- Contact information (address, phone number, email)
- Relevant therapy-related information (including referral details and session content)
- Appointment and cancellation history
For Media/Professional Enquiries:
- Name and contact details (email, phone)
- Organisation (if applicable)
- Nature of your enquiry
4. How Your Data Is Collected
Data may be collected through:
- Booking forms or consent forms
- Enquiry forms on the website
- Email, phone, or video calls
- Direct messages on social media (where relevant)
5. How Your Data Is Stored
For Therapy Clients:
- Clinical notes are securely stored using:
- Writeupp, a GDPR-compliant therapy practice management platform
- reMarkable 2, a password-protected digital note-taking tablet used during sessions
- As this is now a paper-free service, no printed records are stored.
For Media/Business Enquiries:
- Data is stored securely in password-protected email and cloud-based systems.
Mailing Lists:
- If you sign up to receive emails or resources, your name and email address will be stored securely using Kartra, a password-protected customer relationship management (CRM) system with two-factor authentication.
6. Lawful Basis for Processing Your Data
Data is processed under the following legal bases:
- Contract – to provide therapeutic services
- Legitimate Interest – to respond to professional/media enquiries
- Legal Obligation – for accounting or safeguarding responsibilities
- Consent – where you have opted into marketing or mailing lists
7. Who Your Data Is Shared With
Your data will only be shared:
- With your explicit consent
- Where legally required (e.g. safeguarding concerns, legal proceedings)
- Anonymously within clinical supervision, in line with professional standards
8. Data Retention
Therapy records are stored for 7 years after your final session (or until age 26 if you were under 18 at the time of therapy).
Media/business enquiry data is kept for up to 2 years, unless an ongoing working relationship is established.
Financial data (e.g. invoices) are kept for 7 years in line with HMRC requirements.
9. Your Rights Under GDPR
You have the right to:
- Request access to your data (Subject Access Request)
- Request corrections to inaccurate information
- Request data deletion (unless a legal obligation exists to retain it)
- Withdraw consent or object to how your data is used
- Lodge a complaint with the ICO if concerns are unresolved
10. Contact
To request access, make changes to your data, or raise any concerns, please contact:
Dr Marianne Trent
Email: Info@GoodThinkingPsychology.co.uk
Registered with the ICO, UK