Privacy Policy

Effective Date: 18 April 2025

At Positive Changes, your privacy is taken seriously. This policy outlines how your personal data is collected, used, and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Positive Changes is a private therapy service operated by Daniela, offering CBT, EMDR, and Hypnotherapy online and in person in London.

If you have any questions about this policy, please contact:

Email: [email protected]
Phone: 07876 684 347

2. What Personal Data We Collect

We may collect the following types of personal information:

  • Name and contact details (email address, phone number)

  • Information you share via contact forms or during sessions

  • Medical history or therapy-related information (if relevant and consented)

  • Payment details (handled securely by third-party processors)

  • Website usage data (via cookies and analytics tools)

3. How Your Data Is Used

Your personal data is collected for the following purposes:

  • To respond to enquiries or appointment requests

  • To provide therapy services

  • To maintain records in line with professional and legal obligations

  • To monitor and improve website performance (non-identifiable data only)

  • To comply with professional and insurance requirements

4. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

  • Consent – when you provide personal data via forms or communication

  • Contract – to provide therapy services you request

  • Legal obligation – to maintain clinical records where required

  • Legitimate interest – for analytics and internal processes

5. How Your Data Is Stored and Protected

All personal data is securely stored, whether in digital or physical format. Digital files are encrypted and password-protected. Paper notes are stored in locked cabinets. Confidentiality is maintained according to ethical standards and professional codes of conduct.

6. Sharing of Information

Your information is never sold or shared for marketing purposes. It may only be shared:

  • If required by law or safeguarding obligations

  • With your explicit written consent

  • Where there is a risk of serious harm to you or others

Approved third-party services (such as payment or hosting providers) are GDPR-compliant.

7. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Request corrections to inaccurate data

  • Request deletion where legally appropriate

  • Restrict or object to processing

  • Request a copy of your data in a portable format

  • Withdraw your consent at any time

To make a request, please email [email protected].

8. Cookies and Website Analytics

This website uses cookies to improve your experience and to collect anonymous usage data. You can manage cookie preferences via your browser. For more details, see our Cookie Policy.

9. How Long We Keep Your Data

Therapy records are retained for at least 7 years after your final session, in accordance with legal and professional obligations. After this period, data is securely deleted or destroyed.

10. Changes to This Policy

This policy may be updated periodically. Any changes will be reflected on this page with a revised effective date.