Last updated: March 2026
1. Who I Am
I am Hina Pancholi, a UK-based Cognitive Behavioural Psychotherapist and EMDR Therapist in private practice. I am committed to protecting your privacy and handling your personal information with care and transparency.
2. The Information I Collect
I may collect the following types of personal information when you contact me or use my services:
- Name and contact details (e.g., email address, phone number)
- Basic personal information shared during initial enquiries
- Therapy-related information and clinical notes
- Payment information (when applicable)
3. How I Use Your Information
I use your information in order to:
- Respond to enquiries
- Provide psychological therapy
- Maintain clinical records in line with professional standards
- Arrange appointments and manage invoices
- Fulfil my legal and professional obligations
4. Lawful Basis for Processing
I process personal data under the following lawful bases (as defined by the UK GDPR):
- Contract – to provide therapy services you have requested
- Legitimate interests – to manage my practice
- Legal obligation – for record keeping, safeguarding, or regulatory requirements
- Consent – where applicable (e.g., sharing information with your GP)
5. How Your Information Is Stored
Your information is stored securely on password-protected systems. Clinical notes are kept separate from identifying information whenever possible.
6. Sharing Your Information
I will not share your personal data with third parties unless:
- You give explicit consent
- I am required to by law (e.g., safeguarding concerns or court orders)
- It is necessary for the delivery of services (e.g., with your GP or insurer)
7. How Long I Keep Your Information
Clinical records are kept for 7 years after the end of therapy, in line with professional guidelines. After this period, they are securely destroyed.
8. Your Rights
Under the UK GDPR, you have the right to:
- Access your personal data
- Request corrections
- Request deletion (in certain circumstances)
- Object to processing
- Request transfer of your data
- Withdraw consent at any time (where consent is the basis for processing)
To exercise these rights, you can contact me using the information below.
9. Contact
If you have any questions about this privacy policy or your data, you can contact me at: hello@nurturemindtherapy.com
If you have concerns about how your data is handled, you can also contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.