Privacy Policy
Thread Psychology (“Thread”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, enquire about our services or work with us.
Data protection
Thread complies with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The UK GDPR came into effect on 25 May 2018, introducing stronger rights and greater transparency around how organisations collect and use personal information. The Data Protection Act 2018 supplements the UK GDPR and provides the wider UK legal framework for data protection.
Information we collect
Depending on how you interact with Thread, we may collect:
Your name and contact details
Information you provide through our enquiry or contact forms
Information relating to the services you request
Payment and administrative information
Information contained in correspondence with us
Website and technical information, including information collected through cookies where applicable
If you use our psychological therapy services, we may also collect information about your mental health, wellbeing, medical history, personal circumstances and other information relevant to providing appropriate psychological care. Health information is special category personal data under the UK GDPR and is subject to additional legal protections.
How we use your information
We use personal information to:
Respond to enquiries and arrange appointments
Provide psychological therapy, consultancy and training
Maintain appropriate professional and clinical records
Communicate with you about our services
Process payments and manage our business
Meet legal, professional and regulatory obligations
Manage safeguarding and significant risk where necessary
Improve and maintain our website and services
We only collect and use information that is necessary and appropriate for these purposes.
Our legal basis
Under the UK GDPR, we must have a lawful basis for processing personal information. Depending on the circumstances, this may include:
Contract — where processing is necessary to provide a service you have requested
Legitimate interests — where necessary for legitimate business or professional purposes
Legal obligation — where we are required to process information by law
Consent — where we have asked for and received your consent
Vital interests — in limited circumstances where necessary to protect someone's life
Where we process health or other special category information, we will also rely on an appropriate additional condition under Article 9 of the UK GDPR.
Confidentiality
Information shared during psychological therapy is treated confidentially in accordance with professional, legal and regulatory requirements. As HCPC registered Clinical Psychologists we are bound by a distinct set of standards designed to protect the public and ensure safe, effective practice. There are circumstances where confidentiality may need to be limited, including where disclosure is required or permitted by law, or where there is a significant concern about someone's safety. The arrangements around confidentiality may differ when Thread is providing organisational consultancy, team work or training. We will make these arrangements clear at the beginning of the work.
Sharing information
We will only share personal information where there is an appropriate legal, professional or contractual basis. This may include sharing information with relevant healthcare professionals, professional advisers, insurers, service providers or organisations commissioning our services where appropriate. We will not sell your personal information.
Keeping your information secure
We take appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access or disclosure. We retain information only for as long as necessary, taking account of our legal, professional, regulatory and insurance obligations.
Your rights
Under the UK GDPR, you have rights relating to your personal information, including, in certain circumstances, the right to:
Access your information
Request correction of inaccurate information
Request deletion
Restrict or object to processing
Request transfer of your information
Withdraw consent where we rely on consent
These rights are subject to certain legal exemptions and limitations. The ICO requires organisations to provide privacy information explaining matters such as why information is processed, how long it is retained and who it may be shared with.
External websites
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites.
Contact us
If you have any questions about how Thread uses your personal information, or would like to exercise your data protection rights, please contact:
Thread Psychology
Email: hello@threadpsychology.co.uk
Complaints
If you are unhappy with how we have handled your personal information, please contact us first so that we can try to resolve your concern. You can also complain to the Information Commissioner's Office (ICO): Information Commissioner's Office
Last updated: 26th August 2026