Privacy Policy

Inside Talk (“we,” “our,” or “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our therapy and counselling services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We retain your personal data for the following periods:

• Clinical Records: 7 years after last contact (as per professional guidelines)
• Financial Records: 6 years for tax and accounting purposes
• Marketing Data: Until you withdraw consent
• Website Analytics: 26 months maximum

Records for clients under 18 are retained until the client reaches 25 years of age, or 7 years after treatment ends, whichever is longer.

Under UK GDPR, you have the following rights:

To exercise any of these rights, please contact us at info@insidetalk.co.uk

We implement appropriate technical and organisational measures to protect your data:

• End-to-end encryption for video calls and data transmission
• Secure, encrypted storage systems
• Regular security audits and updates
• Staff training on data protection
• Access controls and authentication measures
• Regular backup and disaster recovery procedures

We may share your information only in the following circumstances:

• With your consent: When you explicitly agree to sharing
• Professional consultation: With supervisors or colleagues for clinical purposes (anonymised where possible)
• Legal requirements: When required by law or court order
• Safeguarding: If there's a risk of harm to you or others
• Service providers: With trusted third-party processors (under strict data processing agreements)

We never sell or rent your personal information to third parties.

We use cookies and similar technologies for:

• Essential website functionality
• Analytics to improve our services
• Remembering your preferences
• Security and fraud prevention
• Campaign attribution and conversion measurement, only when you enable Marketing

If you enable Marketing and complete an eligible enquiry or paid assessment, your browser normalises the email address and phone number you supplied and converts each value into a one-way SHA-256 hash before it is made available to Google through our Google Tag Manager container. The plain email address and phone number are not placed in our data layer. We do not send your name, postal address, booking notes, therapy preferences, clinical information or treatment details for campaign measurement.

Marketing consent permits advertising storage and the use of these hashed identifiers for campaign measurement. Advertising personalisation remains disabled. Choosing Analytics without Marketing permits analytics storage only. These cookie choices are separate from any consent you give to receive email marketing, and you can reject or change them through our cookie banner.

Your data is primarily stored and processed within the UK. If we need to transfer data outside the UK, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard Contractual Clauses
• Binding Corporate Rules
• Certification schemes

If you have any questions about this Privacy Policy or how we handle your data, please contact us: