Last updated: 17 JUNE 2025
This privacy policy outlines how we, MIND&CreativeCo. Ltd (trading as MIND&Co.), collect, use, store, and protect your personal information in line with the UK General Data Protection Regulation (UK GDPR).
1. WHO WE ARE
We are MIND&CreativeCo. Ltd (Company No. 16484451), a private therapy collective based in Preston, UK. We offer psychotherapy and creative wellbeing services to adults, young people, and couples — both in person and online.
Our registered office is:
📍 33–34 Winckley Square, Preston, PR1 3JJ
📧 bethan@mindandco.uk / contact@mindandco.uk
📞 07983 193953
Data Controller: Bethan Heap
2. WHAT INFORMATION WE COLLECT
We may collect the following personal data:
- Contact details: name, email address, phone number
- Health and therapy data: information shared in sessions or via consultation/consent forms
- Administrative data: appointment history, invoice and payment records (not card details directly)
- Website data: IP address, browser type, cookies (see section 7)
We only collect what’s necessary for safe, ethical service delivery or what you explicitly consent to.
3. HOW WE USE YOUR INFORMATION
Your data is used to:
- Deliver therapy and wellbeing services safely and ethically
- Manage bookings, appointments, and invoicing
- Communicate session reminders, workshop info, or service updates
- Maintain accurate, legally compliant records
- Send newsletters (only if you opt-in)
- Improve website functionality and user experience
We do not sell or share your data for external marketing purposes.
4. LAWFUL BASES FOR PROCESSING
We process your data under the following UK GDPR bases:
- Consent: newsletter sign-ups or promotional updates
- Contract: delivering therapy and related services
- Legal obligation: tax, safeguarding, and record-keeping requirements
- Vital interests: when risk of harm is identified
- Legitimate interests: to improve our services and support operations
5. HOW WE STORE & PROTECT YOUR DATA
We use secure, encrypted systems to store your information:
- WriteUpp – clinical records and client documentation
- Google Workspace – secure email and file management
- Mailchimp & Flodesk – marketing communications (if subscribed)
- Website CMS & Hosting – where online forms or cookies are involved
We retain therapy records for 7 years (or as legally required). Data is anonymised or deleted when no longer necessary.
6. YOUR RIGHTS
Under UK GDPR, you have the right to:
- Access your personal data
- Request correction or deletion
- Withdraw consent (where applicable)
- Object to or restrict data processing
- Lodge a complaint with the ICO: www.ico.org.uk
To make a request, contact: contact@mindandco.uk
7. COOKIES & WEBSITE ANALYTICS
Our website may use cookies to:
- Enhance your browsing experience
- Understand how users interact with our site (via tools like Google Analytics)
You can control cookies through your browser settings.
8. SHARING YOUR DATA
We only share your data when:
- Required by law (e.g. safeguarding, risk of harm, court order)
- You’ve given clear consent
- Necessary to deliver our services (e.g. secure payment processors, email services)
All third parties we work with are GDPR-compliant and bound by confidentiality agreements.
9. UPDATES TO THIS POLICY
We may update this policy from time to time. The most current version will always be available at:
🌐 www.mindandco.uk/privacy-policy
CONTACT US
Got a question about your data or how it’s handled?
📧 Email: bethan@mindandco.uk / contact@mindandco.uk
📞 Phone: 07983 193953
🏢 Address: 33–34 Winckley Square, Preston, PR1 3JJ