Privacy Policy

Resilient Mind Studios (“I”, “me”, “my”) is operated by Alexandra Haynes, a BABCP‑accredited Cognitive Behavioural Therapist. I am committed to protecting your privacy and handling your personal information with care, transparency, and professionalism.

This policy explains how your personal data is collected, used, and stored in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Alexandra Haynes, Resilient Mind Studios Correspondence email address: info@resilientmindstudios.co.uk. ICO Registration Number: [Your ICO Number]

1. Information I Collect

I collect and process personal data in order to provide therapy, deliver workshops, and respond to enquiries. This may include:

• Name and contact details (email, phone number)
• Information you share in enquiries
• Information shared during therapy sessions
• Assessment notes, formulations, and treatment plans
• Administrative information (invoices, payment records)
• Website usage data (e.g., analytics cookies, if enabled)

I only collect information that is necessary for providing safe, effective services.

2. How Your Information Is Used

Your information is used for:

• Responding to enquiries
• Providing therapy and wellbeing services
• Managing appointments and communication
• Maintaining clinical records
• Delivering workshops and training
• Meeting legal, ethical, and professional obligations

I do not use your information for marketing without your explicit consent.

3. Lawful Basis for Processing

I process personal data under the following lawful bases:

• Contract: to provide therapy or workshops you have requested
• Legal obligation: to maintain clinical records and comply with professional standards
• Vital interests: if information is needed to protect you or someone else from serious harm
• Consent: for optional activities such as receiving newsletters (if applicable)
• Legitimate interests: for administrative tasks and website functionality

4. Confidentiality and Safeguarding

Everything shared in therapy is confidential, with the following exceptions:

• If there is a risk of serious harm to you or someone else
• If required by law (e.g., court order, terrorism legislation)
• If there are safeguarding concerns involving a child or vulnerable adult
• Where possible, I will discuss any necessary disclosures with you.

5. How Your Information Is Stored

• Clinical notes are stored securely in encrypted digital systems.
• Emails are stored in a secure, password‑protected account.
• Paper records (if used) are kept in locked storage.
• Only I have access to your clinical information.
• I retain therapy records for 7 years after your final session, in line with professional guidance.

6. Sharing Your Information

I do not share your personal information with third parties unless:

• You give explicit consent
• It is necessary for safeguarding or legal reasons
• It is required for professional supervision (anonymised)
• It is needed for administrative purposes such as accounting (minimal data only)

I never sell or trade personal data.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request corrections to inaccurate information
• Request deletion of your data (in some circumstances)
• Restrict or object to processing
• Request transfer of your data
• Withdraw consent (where consent is the lawful basis)

To exercise these rights, contact me at info@resilientmindstudios.co.uk.

8. Cookies and Website Analytics

The site may use cookies to improve performance and understand visitor behaviour.

You can disable cookies through your browser settings.

9. External Links

This website may contain links to external sites. I am not responsible for the privacy practices or content of those websites.

10. Changes to This Policy

This policy may be updated periodically to reflect changes in legislation or practice. The most recent version will always be available on this page.