Privacy policy

Last updated: 9 September 2026

This page belongs to Thriving Minds Collective Ltd (Company No. 16358249), trading online as The Greenwich Psychologists. It sets out, without the usual legal padding, what we do with your personal data when you contact us or use this site, and what say you have over it.

Two people hold your data, not one

There’s a split worth understanding here. Thriving Minds Collective Ltd handles the practical side, taking your enquiry, matching you with someone suitable, and keeping the site and booking process running. Our ICO registration for that is ZB902327.

The clinical side is different. Once matched, your psychologist keeps their own record of what happens in assessment and treatment, to the standard the HCPC requires of the profession, and that record isn’t something the wider team can dip into.

Getting in touch tells us certain things

Sending a get-started form or emailing us directly means we learn your name, how to reach you, and whatever you’ve chosen to say about why you’re getting in touch, which can include details about your mental health. We don’t ask beyond what’s genuinely needed to respond well.

Once therapy starts, a separate clinical file builds up alongside this, covering assessment, treatment and progress, held apart from the administrative record described above.

This site also runs analytics, which we cover properly in the cookie policy; it tells us about usage patterns rather than about you as an individual.

Why we’re allowed to process it

The legal grounds shift with the activity. Delivering therapy and handling enquiries rest on one basis, professional and safeguarding obligations on another, and anything to do with analytics cookies depends on the consent you’ve given, which you can pull at any time. Where data touches on your health specifically, we rely on the UK GDPR provision built for healthcare, on top of your explicit agreement where that’s also needed.

Beyond passing your get-started answers to the psychologist you’re matched with, nothing goes anywhere else routinely. We don’t sell information and we don’t use it to market to you. Exceptions exist only where something serious is at stake, a safety risk or an HCPC-driven legal duty, and we’ll flag it to you first wherever that’s practically possible.

Keeping it secure

Encryption sits behind both the administrative and clinical data we hold, and only people who need access for their role get it. Nothing said on a video call is ever recorded. We check our safeguards periodically rather than setting them once and forgetting them.

How long records last

General contact details don’t outlive their purpose by much, usually gone within two years of your last message to us. Clinical notes run considerably longer, matching HCPC and NHS practice at roughly seven years from your last session, and anything financial is kept the seven years HMRC expects.

What you can ask of us

UK GDPR gives you the right to see what we hold, correct it if it’s wrong, have it deleted once we no longer need it, push back on or limit certain uses, and take a portable copy elsewhere. Consent given for anything, including analytics, can be withdrawn without touching therapy already under way. Use the email below for any of this, and expect a response inside a month.

A person always checks first

No decision that meaningfully affects you is left entirely to software here. Every get-started submission is read by a clinical team member before anyone decides on matching or what happens next.

Questions or a complaint

For anything about this policy, email [email protected]. Separately, and at any stage, you’re entitled to complain to the Information Commissioner’s Office, reachable at ico.org.uk or on 0303 123 1113.

This page will move

As the law or our own practice changes, this policy gets updated, and the date at the top will always say when that last happened.