Lifecycle Psychology – Privacy Policy
Lifecycle Psychology is committed to protecting your privacy and handling your personal information with care, respect, and transparency. This privacy policy explains what data we collect, why we collect it, how it is used, and your rights under UK data protection law.
1. Who we are
Lifecycle Psychology (Lifecycle Psychology LLP) provides psychological assessment, therapy,
consultation and supervision services.
Data Controller: Lifecycle Psychology LLP
Email:
ICO Registration Number: ZB972298
As a psychological service, we are legally and ethically required to keep certain information in order to deliver safe, effective care. See section 2 for further information.
2. Information we collect
We collect and process the following types of personal data:
a) Personal and contact information
Name, date of birth, address, mail, phone number and emergency contact details
b) Clinical information
Referral information, background history, session notes and assessments, outcome measures, information provided by other professionals (where relevant/appropriate)
c) Sensitive (“Special Category”) data
This may include information about mental health, physical health, family relationships, pregnancy or perinatal history, race or ethnicity (if relevant to assessment), sexual life or orientation (if relevant), religious or philosophical beliefs (if relevant). This data is processed under Article 9(2)(h) UK GDPR: “health or social care purposes, including assessment and treatment.”
d) Administrative and financial information
Invoices, payments, billing details, appointment records
e) Website or email enquiries
If you contact us via our website or email, we may collect your contact details and any information you provide.
3. Why we collect certain information
We collect and process data for the following purposes:
a) To provide psychological services
Our lawful basis: Article 6(1)(b) – contract for services, Article 9(2)(h) – health care provision
b) To ensure safety and safeguarding
Our lawful basis: Article 6(1)(d) – vital interests, Article 9(2)(c) – protecting life, Article 9(2)(g) – safeguarding duties
c) To meet legal, professional, and regulatory obligations
Including HCPC standards, safeguarding legislation, and tax requirements.
d) To manage appointments, invoicing, and communication
Our lawful basis: Article 6(1)(c) – legal obligation. Article 6(1)(f) – legitimate interests (running a safe, efficient practice)
4. How your information is stored
We store data securely using:
- Secure electronic record systems
- Password-protected devices
- Secure email practices
- Access for authorised staff clinicians only
- Records are kept separate from third-party platforms (e.g., payment processors)
5. Who we share information with
We only share information when necessary and appropriate.
We may share information with:
- Your GP or other health professionals involved in your care (with your consent where possible) if we have concerns for your safety
- Social services or safeguarding teams (where required by law)
- Emergency services if someone is at immediate risk
- Other professionals involved in your care (with consent)
- For the purposes of clinical supervision: if your clinician receives specialist supervision external to Lifecycle Psychology they will discuss this with you.
- Our accountant (financial data only, non-identifiable information)
We will not share your information:
- For marketing
- With third parties for profit
- With anyone not involved in your care except where legally required
- Where possible, we will always discuss information sharing with you first.
6. Consent and Your Rights
Under UK GDPR you have the right to:
- Access your records: you can request a copy of your information in writing via contacting our admin email address (see below).
- Request corrections: if something is inaccurate, you can ask us to update it.
- Request deletion: we may not be able to delete clinical records immediately due to legal retention requirements, but we can remove non-essential data.
- Restrict processing: you can ask us to limit the use of your data in certain situations.
- Object to processing: you can object to certain types of data use (not applicable to essential clinical information).
- Data portability: you can request a structured, electronic copy of your data for transfer to another provider.
To exercise any of these rights, contact us at:
7. Record Retention
We keep clinical records for:
- Adults: 7 years from the end of treatment
- Children: Until their 25th birthday (or 26 if treated at age 17)
- Safeguarding records: Kept for longer if required by law
- Financial records are retained for 6 years (HMRC requirement).
8. Confidentiality and exceptions
Everything you share with us is confidential except in specific situations where we are legally
required to act.
We may break confidentiality if:
- There is an immediate risk of harm to you or someone else
- A child or vulnerable adult is at risk of harm
- We are ordered by a court
- You disclose information about serious criminal activity (e.g., terrorism)
- Where possible, we will discuss this with you first.
9. Use of email, text and online platforms
We will be contacting you via email, WhatsApp and phone. If you’re not happy with us contacting you using any of these methods then please let us know via email or discuss with your therapist directly.
We use secure and GDPR-compliant systems for communication and document storage.
However, clients should be aware that no digital system is fully risk-free.
10. Complaints about data protection
If you are unhappy with how we handle your information, please contact us at:
You also have the right to complain to the Information Commissioner’s Office (ICO): https://www.ico.org.uk/
11. Updates to this privacy policy
We review this policy regularly to make sure it reflects current laws and best practices.
Any updates will be published, and clients will be informed where appropriate.
