1. Who We Are

This Privacy Notice explains how personal data collected through arete-therapy.co.uk is handled.

I operate as an individual private therapist based in the United Kingdom. I am registered with the Information Commissioner's Office (ICO) as a data controller.

• Data Controller Name: Rita Charalambides
• Website: https://arete-therapy.co.uk
• ICO Registration Number: ZB067986
• Contact Email: hello@arete-therapy.co.uk

If you have any questions about this policy or how your personal data is handled, please contact me directly using the contact details above.

2. Information I Collect

When you use this website or inquire about therapy services, I may collect personal information that you voluntarily provide, including:

• Identity Data: Your full name.
• Contact Data: Email address, phone number, and address details.
• Communication Data: Information included in any messages, contact form submissions, or emails sent regarding therapy services.
• Therapy & Health Data (Special Category Data): Any brief health, well-being, or background details shared during preliminary contact or therapy sessions.

3. Lawful Basis for Processing Data

Under the UK General Data Protection Regulation (UK GDPR), I rely on the following lawful bases to process your personal data:

• Contractual Necessity / Pre-contractual steps: To respond to your initial inquiries, schedule appointments, and provide therapy services requested by you.
• Legitimate Interests: To maintain accurate administrative records, manage client communications effectively, and operate my practice.
• Explicit Consent & Special Category Data Processing: When handling sensitive health-related details related to therapy services (Article 9 UK GDPR).

4. How I Use Your Data & Confidentiality

Your personal data is used strictly to communicate with you and provide professional therapy services.

Confidentiality is fundamental to therapy. Your personal details, clinical notes, and session content remain strictly confidential.

Exceptions to Confidentiality

Information shared remains confidential except under rare statutory or legal obligations, including:

• Where there is an imminent risk of serious harm to yourself or others.
• Where disclosure is legally mandated under UK legislation (such as terrorism, money laundering, or child protection/safeguarding concerns) or by court order.

5. Third-Party Data Processors

I do not sell, rent, lease, or trade your personal data to third parties for marketing or any other commercial purposes.

I only utilize secure third-party service providers (such as website hosting platforms and secure email services) to support the technical operation of this website and client communications. These services act strictly as Data Processors on my behalf and are bound by confidentiality and UK data protection standards.

6. Website Cookies

My website uses essential technical cookies required for the site to function securely and effectively.

If non-essential cookies or analytics tools are used on this site, you will be prompted via a cookie consent banner to accept or decline them. You can also manage or disable cookies at any time through your web browser settings.

7. Data Security & Retention

• Security: I implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, loss, or misuse.
• Retention: Personal data and clinical notes are retained securely only for as long as necessary to fulfill the purposes for which they were collected, meet professional therapy association guidelines, and comply with legal or insurance obligations.

8. Your Data Rights (Under UK GDPR)

Under UK data protection law, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data held about you.
• Right to Rectification: You can request corrections to inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): You can request the deletion of your personal data (subject to legal or professional record-keeping requirements).
• Right to Restrict or Object: You can ask to limit or object to the processing of your data.
• Right to Withdraw Consent: Where processing relies on explicit consent, you may withdraw your consent at any time.

To exercise any of these rights, please email me directly using the contact details provided in Section 1.

9. How to Lodge a Complaint

If you have any concerns about how your data is handled, I encourage you to contact me first so we can address the issue together.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113