This notice explains how I collect, use and protect your personal information when you visit this website, contact me or book an appointment. I take your privacy seriously — confidentiality is at the heart of therapy, and the same care applies to your data.
Who I am
The data controller is Therapy with Carmela, trading as Carmela D. ("I", "me"). I am registered with the Information Commissioner's Office (ICO), registration number [ICO number — add it in Settings].
Contact: hello@therapywithcarmela.com · Upper Street Therapy Rooms, 200 Upper Street, London, N1 1RQ
What information I collect
When you book or contact me
- Your name, email address and (if you choose to give it) phone number.
- The type, date and time of the appointment you book, and whether it is your first session.
- Anything you choose to write in the optional note field. Please keep this brief — there is no need to share personal or medical details before we speak.
- Technical information needed to protect the booking form from abuse: your IP address and browser type.
If we work together
During therapy I keep brief session notes. These are covered by my separate client agreement, which I will give you before our first session and which explains how clinical records are stored and for how long.
When you browse the site
Strictly necessary cookies keep forms secure. Analytics cookies are only used if you accept them — see the cookie policy.
Why I use your information, and the lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|
| Arranging, confirming, reminding you of and rescheduling appointments | Article 6(1)(b) — taking steps at your request before entering into a contract, and performing that contract |
| Information that reveals you are seeking therapy (special category health data) | Article 9(2)(h) — provision of health care under the responsibility of a professional bound by confidentiality, and Article 9(2)(a) — your explicit consent when you submit the form |
| Replying to messages sent through the contact form | Article 6(1)(f) — legitimate interests in responding to enquiries |
| Keeping basic financial records | Article 6(1)(c) — legal obligation (HMRC requires records to be kept for six years) |
| Website analytics (only with your consent) | Article 6(1)(a) — consent, which you can withdraw at any time |
Who your information is shared with
I never sell your data or use it for marketing. A small number of trusted service providers process data on my behalf, under written agreements:
- Website hosting — stores the booking system and its database.
- Email provider — sends confirmations and reminders.
- Notification services — I receive a short alert when a booking is made (for example via Telegram or my phone's notification service). These alerts contain only the date, time, session type and your initials — never your contact details or notes.
- Video calls — for online sessions I use an encrypted video platform. The link is sent to you by email.
Some of these providers may store data outside the UK. Where they do, the transfer is protected by UK adequacy regulations or the International Data Transfer Agreement / Addendum approved by the ICO.
I may have to share information without your consent in rare circumstances required by law, or where there is a serious risk of harm to you or others. I will always try to discuss this with you first.
How long I keep it
- Booking details (name, contact details, appointment times) are erased automatically 24 months after the appointment.
- Contact form messages are deleted within 12 months.
- Financial records are kept for six years, as required by HMRC.
How I protect it
The site uses HTTPS encryption. The admin area is protected by a strong password and two-step verification, and access is limited to me. Notifications are designed to reveal as little as possible.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information I hold about you;
- ask me to correct anything that is wrong;
- ask me to delete your information (unless I have to keep it by law);
- ask me to restrict or object to how I use it;
- receive your information in a portable format;
- withdraw consent at any time, where I rely on consent.
To make a request, email hello@therapywithcarmela.com. I will respond within one month and there is normally no charge.
Complaints
If you are unhappy with how I have handled your information, please tell me first so I can try to put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.
Changes to this notice
I review this notice regularly. The date of the latest update is shown below.
Last updated: 4 November 2026