Privacy Notice

Last updated: 31 July 2026

Your privacy is important to me. You can be confident that your personal information will be kept securely and used only for the purpose for which it was provided. I comply with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This privacy notice explains how I collect, use, store and protect your personal information when you visit this website or contact me about psychotherapy.

1. Who I Am

Threshold Psychotherapy is a private psychotherapy practice owned and operated by Kevin Brohan. I am the data controller for the personal information collected through this website and during the course of my practice.

I am registered with the Information Commissioner’s Office (ICO).

If you have any questions about this privacy notice or the way your information is handled, you can contact me here:

Email

2. The Information I Collect

Depending on how you interact with the practice, I may collect:

  • Your name
  • Email address
  • Telephone number
  • Information you choose to include in your enquiry
  • Information necessary to provide psychotherapy, should you become a client
  • Financial information required for invoicing and accounting

If you arrive at this website via a Google advertisement, a Google Click Identifier (GCLID) may also be collected. This is used only to measure the effectiveness of advertising and is never used to make decisions about you.

This website also uses Google reCAPTCHA to help protect the contact form from spam and automated abuse.

3. How I Use Your Information

Your personal information is used only for legitimate professional purposes, including:

  • Responding to enquiries
  • Arranging introductory calls and appointments
  • Providing psychotherapy
  • Maintaining clinical records
  • Meeting professional, legal and regulatory obligations
  • Improving the effectiveness of this website and advertising

I do not sell, rent or use your personal information for marketing purposes.

4. Lawful Basis for Processing

Under UK GDPR, I rely on the following lawful bases for processing personal information:

  • Legitimate Interests — responding to enquiries, operating the practice and maintaining appropriate records.
  • Performance of a Contract — where we agree to work together therapeutically.
  • Legal Obligation — where I am required to retain records or disclose information by law.

Where special category data relating to health is processed, this is undertaken for the provision of health care in accordance with UK data protection legislation.

5. Confidentiality

Everything you discuss with me is treated as confidential.

There are, however, rare circumstances where confidentiality may need to be broken, including:

  • Where there is a serious risk of harm to yourself or another person.
  • Where disclosure is required by law.
  • Where there are safeguarding concerns involving a child or vulnerable adult.

Wherever possible, I will discuss any necessary disclosure with you first.

6. Sharing Information

Your information will not normally be shared with anyone outside the practice without your knowledge and consent.

Information may be shared where:

  • It is required by law.
  • It is necessary to protect someone from serious harm.
  • Professional advice is required in relation to the safe delivery of therapy (for example, during clinical supervision). Information discussed in supervision is anonymised wherever possible.

7. Storage and Security

I take appropriate technical and organisational measures to protect your personal information.

Information is stored securely using Microsoft 365 and other secure professional systems appropriate to the running of the practice.

Some service providers used by the practice may process information outside the UK. Where this occurs, appropriate safeguards are in place in accordance with UK data protection law.

8. How Long I Keep Information

If you contact me but do not become a client, your enquiry will normally be retained for up to six months before being securely deleted.

If you become a client, your clinical records will normally be retained for seven years after therapy ends before being securely destroyed.

Financial records are retained for the period required by UK tax legislation.

9. Cookies and Website Technologies

This website does not use Google Analytics.

Google reCAPTCHA is used to protect the contact form from spam and abuse.

If you arrive via a Google advertisement, Google Ads conversion tracking may be used to help understand the effectiveness of advertising.

Your web browser may also store cookies that are necessary for the normal operation of the website and these third-party services.

10. Your Rights

Under UK GDPR you have the right to:

  • Request access to the personal information I hold about you.
  • Request that inaccurate information is corrected.
  • Request that your information is erased where appropriate.
  • Restrict or object to certain types of processing.
  • Request a copy of your personal information in a portable format where applicable.
  • Lodge a complaint with the Information Commissioner’s Office if you believe your information has been handled improperly.

For more information visit:

www.ico.org.uk

11. Changes to this Privacy Notice

This privacy notice may be updated from time to time to reflect changes in legal requirements or the way the practice operates. The latest version will always be available on this website.

Return