Privacy Policy

LJS Psychology | Dr Lisa Stuart

Last updated: 10 May 2025

Contents

1. Who We Are 2. What We Collect 3. Why We Collect It 4. How We Store It 5. Retention 6. Who We Share With 7. Third Party Processors 8. Your Rights 9. Website & Cookies 10. Contact Us

This Privacy Policy explains how LJS Psychology (Dr Lisa Stuart) collects, uses, stores and protects your personal data. It covers how we handle personal data provided as part of a therapeutic relationship, and how we handle data collected through our website.

Part One: Client Data Privacy Notice

1. Who We Are

LJS Psychology is a private psychology practice operated by Dr Lisa Stuart, Principal Clinical Psychologist and accredited Cognitive Analytic Therapy (CAT) Practitioner. Dr Stuart is the Data Controller for all personal data processed by LJS Psychology.

Contact email: ljspsychology@proton.me
ICO Registration Number: [XXXXXX]

We are registered with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK-GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

When you engage with LJS Psychology as a client, we may collect:

  • Your full name, date of birth and contact details (email, phone)
  • Information about your presenting difficulties, mental health history and relevant personal history
  • Session notes, formulations, treatment plans and assessments
  • GP and emergency contact details where provided
  • Payment and invoicing records
  • Any correspondence between us

Some of this is classed as special category data under UK-GDPR (health and mental health data). This attracts a higher level of protection and is handled accordingly.

3. Why We Collect Your Data and Our Lawful Basis

Provision of psychological therapy , Lawful basis: Contract (Article 6(1)(b)) and Health and Social Care purposes (Article 9(2)(h) UK-GDPR).

Keeping clinical records , Lawful basis: Legal obligation. As an HCPC-registered professional, Dr Stuart is required to maintain accurate clinical records.

Invoicing and payment , Lawful basis: Contract and Legitimate Interests.

Safeguarding and legal obligations , Lawful basis: Legal obligation and Vital Interests.

4. How We Store Your Data

  • Written session notes are stored in a locked, non-portable cabinet accessible only to Dr Stuart
  • All electronic records are on an encrypted, password-protected device used solely by Dr Stuart
  • Emails containing personal information are sent via a secure email service and password protected where required
  • Online sessions use Zoom, which uses end-to-end encryption. Sessions are never recorded without explicit consent

5. How Long We Keep Your Data

Personal data for adult clients is retained for 7 years following the end of the therapeutic relationship, in line with UK-GDPR and HCPC guidance, after which it is securely and confidentially destroyed.

6. Who We Share Your Data With

Your personal data will not be sold or shared for marketing purposes. It may be shared with:

  • My clinical supervisor (anonymised, bound by the same professional confidentiality standards)
  • Your GP or other professionals, with your prior consent
  • Relevant authorities where legally required (safeguarding, court orders)
  • Third party service providers as described below

7. Third Party Processors

Zoom , Used for online sessions. May process session metadata. Sessions are not recorded without explicit consent. Zoom's servers may be located outside the UK. See zoom.us/privacy.

Proton Mail , Used for all client email communications. Proton Mail provides end-to-end encryption. See proton.me/legal/privacy.

Netlify , Website hosting provider. See netlify.com/privacy.

Formspree , Contact form processor. When you submit an enquiry via the contact form on this website, your name, email address and message are processed by Formspree and delivered to our email inbox. Formspree does not use your data for marketing purposes. See formspree.io/legal/privacy-policy.

8. Your Rights Under UK-GDPR

You have the right to: access your personal data; have inaccurate data corrected; request erasure (subject to legal obligations); restrict or object to processing; data portability; and to withdraw consent where processing is consent-based.

To exercise any right, please contact us in writing. We will respond within one calendar month. You may also complain to the ICO at ico.org.uk/concerns or 0303 123 1113.

Part Two: Website Privacy & Cookie Policy

9. Website & Cookies

Contact form , If you submit an enquiry via our website contact form, we collect your name, email address and message. This data is used solely to respond to your enquiry. It is transmitted securely via our contact form and delivered to our Proton Mail inbox. Lawful basis: Legitimate Interests.

Analytics , Our website may collect anonymised visitor data (pages viewed, general location). No personally identifiable information is collected through analytics.

Cookies , We use essential cookies (required for the site to function) and analytics cookies (only with your consent via our cookie banner). The website uses minimal cookies for basic functionality. No advertising or tracking cookies are used.

10. Contact Us

Dr Lisa Stuart, LJS Psychology
Email: ljspsychology@proton.me
ICO Registration: [XXXXXX]
Website: ljspsychology.co.uk

If you have questions about this policy please contact us. We may update this policy from time to time, any changes will be posted on this page with an updated date.