Privacy Policy & Client Privacy Notice

Zoe Leitch Psychology is committed to protecting your privacy. This notice explains how your personal data is collected, used, and stored when you interact with this website or when you access services.

Who we are (data controller)

The data controller is Zoe Leitch (Zoe Leitch Psychology).
Address: available on request
Contact: [email protected]

What data we collect

We may collect:

Your name and contact details (email, phone number, address)

Information you choose to share via forms, email, or consultation booking

Client intake information relevant to providing support (which may include wellbeing/health-related information)

Special category data (health-related information)

If you complete a client intake or consultation form, you may provide information that is considered special category data (for example, information about your health or wellbeing). We treat this information with additional care and only use it for the purposes described below.

How we use your data

Your data may be used to:

Send the resource you requested

Respond to enquiries

Deliver services you have booked

Manage client administration (including scheduling, payments, and communication)

Send emails you have opted in to receive

Improve services and communications

Lawful basis for processing

We process personal data under the following lawful bases:

Consent (e.g., email marketing; and where you provide information via forms)

Contract (e.g., where you book services)

Legitimate interests (e.g., improving services and communication)

Where special category data is provided (e.g., via client intake forms), we process it only where appropriate and necessary for providing services/support, and with suitable safeguards in place.

Email marketing

If you opt in to receive emails, you can unsubscribe at any time using the link in any email.

Data sharing

We do not sell your data.
We may use trusted third-party providers (such as email platforms, website hosts, form providers, or booking/payment systems) to process data on our behalf. These providers are required to handle your data securely and only for the purposes we specify.

Data retention

We retain personal data only for as long as necessary for the purposes outlined above, or as required by law.

Security

We take reasonable steps to protect your personal data and keep it secure. No method of transmission or storage is completely secure, but we work to protect your information using appropriate technical and organisational measures.

Your rights

Under UK data protection law, you have the right to:

Access your personal data

Correct inaccurate data

Request deletion of your data (where applicable)

Restrict or object to processing

Withdraw consent at any time (where processing is based on consent)

Complaints

If you have concerns about how your data is handled, you can contact us using the details above. You also have the right to raise a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/