Introduction
This website is operated by Susie Hewitt, Transactional Analysis psychotherapist, trainer and supervisor ("I", "me"). I am committed to protecting your privacy and handling your personal data in accordance with UK GDPR and the Data Protection Act 2018.
Contact: susie@psychotherapyinstitute.co.uk
ICO Registration Number: ZB024013
Data Collection
What Information I Collect:-
-
Contact form: name, email address, and the content of your message
-
Bookings: name, email, phone number, and payment details (processed securely by Wix Payments)
-
Clinical work: if you become a client, I keep session notes and relevant clinical information as part of your therapy record, in line with UKCP/BACP professional and ethical requirements.
Legal Basis for Processing
- To respond to enquiries and arrange sessions — legitimate interest / contract
- To provide psychotherapy and supervision services, including keeping clinical records —consent and legitimate interest (health data is "special category" data under Article 9 UK GDPR, processed with your explicit consent, given at the start of therapy)
- To take payment for services — contract
Your contact and booking details are used only to communicate with you and manage sessions. Clinical notes are kept confidentially and are not shared with third parties except:
- Where required by law
- Where I am legally or ethically obliged to act on a safeguarding concern (risk of serious harm to you or others)
- With my clinical supervisor, in anonymised form, as part of standard professional practice
Data Storage & Retention
- Website form and booking data is stored via Wix's secure systems
- Clinical records are retained in line with UKCP/BACP guidance (typically a minimum of 7 years after the end of therapy, or longer where required)
- Data is stored securely and access is limited to me
Third-Party Services
This site uses Wix as its website and booking platform, which may set cookies and process data on my behalf as a data processor. See Wix's privacy policy (https://www.wix.com/about/privacy) for details of their processing.
I use Heidi, an AI-powered clinical note-taking assistant, to help produce session notes. Heidi AI processes session content to generate structured notes on my behalf and acts as a data processor for this purpose. I will always let clients know before using this tool in relation to their sessions and will only do so with their consent. If you would prefer your sessions were not processed this way, let me know and I will keep manual notes instead. See Heidi Health’s privacy policy https://www.heidihealth.com/en-gb/legal/privacy-policy for details of their processing.
Your Rights
- Right of access: You can request details of the personal information I hold about you.
- Right to rectification: You can ask me to correct inaccurate or incomplete data.
- Right to erasure: You can ask me to delete your data (subject to my professional insurance requirements).
- Right to complain: You have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.
- To exercise any of these rights, contact me at susie@psychotherapyinstitute.co.uk
Cookies
This website uses cookies via Wix for essential site functionality and analytics to understand how visitors interact with the site. You can choose to accept or decline cookies through your browser settings or the site cookie banner.
Changes & Contact
I may update this policy to reflect changes in legal requirements or my professional practice. If you have questions about how your data is handled, please contact me at susie@psychotherapyinstitute.co.uk.