Privacy Policy

Privacy Notice

Last updated: [24.01.2026]

Your Privacy Matters

Your privacy and confidentiality are extremely important to us. As providers of psychological services, we take great care to protect your personal information and to handle it in line with professional ethical standards and UK data protection law, including the UK General Data Protection Regulation (UK GDPR).

This Privacy Notice explains how we collect, use, and protect your information when you use our website or engage in therapy with us, including online therapy.

1. Who We Are

Prana Psychological Services is the data controller for your personal information. This means we are responsible for how your data is collected, used, and stored.

If you have any questions about this notice or your data, you can contact us using the details at the end of this page.

2. What Information We Collect

We may collect and store the following information:

Contact details (such as your name, email address, and phone number)
Personal and health information relevant to providing psychological services
Appointment and communication records
Payment information (payments are processed securely by third-party providers; we do not store full card details)
Website information such as IP address, browser type, and cookies

Health information is treated as special category data under UK GDPR and is given a higher level of protection.

3. Why We Collect Your Information

We only collect information that is necessary to provide our services. This includes:

Providing psychological assessment and therapy
Communicating with you and arranging appointments
Keeping accurate clinical records
Processing payments
Meeting our legal, ethical, and professional obligations
Improving our website and services

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful reason for using your data. These include:

Your consent, where required
Provision of health care or treatment
Compliance with legal obligations
Legitimate interests, such as running and improving our practice safely and effectively

5. Online Therapy and Electronic Communication

Online therapy sessions are provided using secure, encrypted platforms designed for healthcare use. While we take reasonable steps to keep your information safe, no online system can be guaranteed to be completely secure.

We recommend that you:

Use a private device where possible
Access sessions from a quiet, private space
Use a secure internet connection

6. Confidentiality and When Information May Be Shared

Your information is kept confidential and will not be shared without your consent, except in specific circumstances required or permitted by law, including:

If there is a serious risk of harm to you or someone else
Safeguarding concerns involving children or vulnerable adults
When required by a court or legal process
For professional supervision or consultation (with identifying details kept to a minimum wherever possible)

7. How Your Information Is Stored and Protected

We use appropriate technical and organisational measures to protect your information from loss, misuse, or unauthorised access. Records are stored securely and retained only for as long as required by law and professional guidelines.

8. Cookies and Website Analytics

Our website may use cookies to help it function properly and to understand how visitors use the site. These cookies do not collect sensitive or clinical information.

You can control or disable cookies through your browser settings if you wish.

9. Your Rights Under UK GDPR

You have important rights regarding your personal information, including the right to:

Access the information we hold about you
Ask for incorrect information to be corrected
Request deletion of your data (in certain circumstances)
Withdraw consent where processing is based on consent
Raise concerns about how your data is used

To exercise your rights, please contact us using the details below.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your data has been handled improperly.

10. Third-Party Services

We may use trusted third-party services (such as secure video platforms, website hosting, and payment providers). These providers are required to handle your data in line with UK GDPR and appropriate security standards.

We are not responsible for the privacy practices of external websites linked from our site.

11. Changes to This Privacy Notice

We may update this Privacy Notice from time to time. Any changes will be posted on this page, with the date updated at the top.

12. Contact Details

If you have any questions or concerns about this Privacy Notice or how your information is handled, please contact:

Prana Psychological Services
dilhara@pranapsychology.net