top of page
Asset 3_2x.png

Privacy Policy

A legal disclaimer

Last updated: 27/09/2025

​

This Privacy Policy explains how I, Dr Aditi Sharma, HCPC-Registered Clinical Psychologist, the data controller, collect, use, and protect your personal information when you use my services or visit my website.

​

 

1. Who I Am

​

I am a Clinical Psychologist registered with the Health and Care Professions Council (HCPC): PYL042945. I provide psychological therapy to adults in private practice.

​

 

2. Information I Collect

​

To provide safe and effective therapy, I require to collect the following information:

  • Personal details: name, date of birth, contact details, emergency contact.
     

  • Health information: GP details, medication, relevant medical history.
     

  • Therapy information: assessment notes, questionnaires, session records, correspondence.
     

  • Appointment and billing information
     

  • Website use: basic technical information (e.g. cookies, IP address) for security and analytics.

  • ​

 

3. How I Use Your Information

​

Your information may be used to:

  • Arrange and deliver therapy sessions.
     

  • Keep clinical records in line with professional and legal requirements.
     

  • Communicate with you about appointments and therapy.
     

  • Liaise with other professionals (only with your consent, unless there is risk of serious harm or legal obligation).
     

  • Maintain secure practice administration.
     

 

4. Confidentiality

​

Everything you share in therapy is confidential. Exceptions apply if:

  • There is a risk of serious harm to yourself or others.
     

  • There are safeguarding concerns for a child or vulnerable adult.
     

  • I am required by law to disclose information (e.g. by court order).
     

 

5. Legal Basis for Processing (GDPR)

​

Your personal data is processed under the following lawful bases:

  • Contract: to deliver therapy you have requested.
     

  • Consent: where you agree to information sharing (e.g. with your GP).
     

  • Legal obligation: to maintain professional records as required by law.
     

  • Legitimate interests: to manage my practice securely and effectively.
     

 

6. How Your Data Is Stored

​

  • Records are kept securely (password-protected and encrypted) on a cloud-based system called Write Upp. Write Upp is GDPR compliant.

  • Data is retained for 7 years after therapy ends (or until age 25 if under 18), in line with HCPC guidance.
     

 

7. Your Rights

​

Under GDPR, you have the right to:

  • Access the information I hold about you.
     

  • Request corrections to your information.
     

  • Request deletion of your information (in some circumstances).
     

  • Withdraw consent for information sharing (unless required by law).
     

  • Make a complaint to the Information Commissioner’s Office (ICO) if you are concerned about how your data is handled.
     

 

8. Sharing Information

​

I will not share your personal information with third parties for marketing or non-clinical purposes. Information is only shared with your explicit consent, or in exceptional circumstances outlined in the Terms and Conditions.

​

 

9. Website and Cookies

​

This website may use basic cookies or analytics to improve functionality. You can disable cookies in your browser settings if you prefer.

 

10. Contact

​

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Dr Aditi Sharma
Email: draditi@moodinmind.co.uk
ICO Registration Number: ZB985112

bottom of page