Privacy policy

Last updated: 8 September 2026

The Maidstone Psychologists is the trading name of Thriving Minds Collective Ltd (Company No. 16358249). This page explains, in plain terms, what personal data we collect through this website and your dealings with us, what we do with it, and the choices and rights you have.

Two kinds of data controller

There are two layers to how your data is handled here. Thriving Minds Collective Ltd controls the administrative side: your enquiry, matching you to a psychologist, and running the site and booking process. We’re registered with the Information Commissioner’s Office under reference ZB902327.

Separately, once you’re matched with a psychologist, they hold their own clinical records about your assessment and treatment, in line with the standards the Health and Care Professions Council sets for the profession. Those clinical notes stay with your treating psychologist rather than sitting in one shared file the whole team can open.

What we ask for and why

Completing our get-started questionnaire, or getting in touch directly, means giving us your name, a way to contact you, and whatever you choose to tell us about what’s brought you to us, which may include sensitive information about your mental health. We keep the questions to what’s needed to respond properly and safely.

If therapy goes ahead, your psychologist keeps clinical records of the assessment, treatment and how things are progressing, held apart from general enquiry data.

The site also runs analytics tools, covered fully in our cookie policy, that tell us how the site is being used without identifying you as an individual.

The legal basis for processing

We rely on different lawful bases depending on the activity: responding to enquiries and delivering therapy, meeting professional and safeguarding obligations, and, where you’ve agreed to it, running analytics cookies. Consent-based processing can be withdrawn by you at any time. Anything health-related is handled under the specific UK GDPR ground that covers healthcare provision, alongside your explicit consent where that applies.

Where your information goes

Answers from the get-started questionnaire are passed to the psychologist you’re matched with, and nowhere else beyond that as a matter of course. We don’t sell data and we don’t use it for marketing. There are limited circumstances where we might disclose information without asking first, such as a serious risk to someone’s safety or a legal obligation under HCPC rules, and wherever practical we’ll talk to you about it beforehand.

How we protect it

Personal and clinical information sits on encrypted systems, with access restricted to people who need it for their role. Video sessions are encrypted and never recorded. We keep our security measures under review and take reasonable steps against loss, misuse or unauthorised access.

How long we hold it

We keep enquiry and contact details only as long as needed to respond to you, generally no more than two years after your last contact. Clinical records are held for longer, following HCPC and NHS good-practice guidance, usually at least seven years from your final session. Financial records are kept for seven years to satisfy HMRC rules.

Your rights under UK GDPR

You’re entitled to ask us for a copy of the data we hold on you, to have inaccuracies corrected, to have data deleted where we’re not obliged to keep it, to restrict or object to certain uses, and to receive your data in a portable format. You can withdraw consent at any time without it affecting therapy you’re already receiving. Email us using the details below to exercise any of these, and we’ll respond within a month.

No purely automated decisions

We don’t make decisions with a legal or similarly significant effect on you using automated processing alone. The get-started questionnaire is reviewed by a member of our clinical team before any decision about matching or next steps is made.

Cookies, in short

A small number of cookies run on this site. See our cookie policy for the full picture.

Getting in touch or raising a complaint

Questions about this policy, or how we’ve handled your data, can go to [email protected]. You can also complain to the Information Commissioner’s Office at any point, whether or not you’ve raised it with us first, via ico.org.uk or 0303 123 1113.

Keeping this policy current

We’ll update this page as our practice or the law changes, and any revision will carry a new date at the top.