Privacy Policy

Last updated: 5 November 2026

This policy explains how Incorporatetherapy Ltd ("inCorporate Therapy", "we", "us") collects and uses personal data when you visit www.incorporatetherapy.co.uk, get in touch with us, or take part in our services.

Who we are

Incorporatetherapy Ltd is a company registered in England and Wales (company number 16179603). We are the data controller for the personal data described in this policy.

If you have any questions about this policy or your data, email privacy@incorporatetherapy.co.uk.

What we collect

  • Contact details you give us, such as your name, email address, phone number, job title and organisation.
  • Enquiry and booking details, such as messages sent through our contact form or by email, and calls you book with us through Calendly.
  • Service information. When we deliver programmes, workshops, supervision or therapy, we may keep session notes, survey responses and feedback. Some of this may include information about your health or wellbeing, which the law treats as special category data.
  • Website data, such as your IP address, browser and device type, the pages you visit and how you found us. Some of this is collected through cookies (see below).

How we use your data and our lawful basis

  • To reply to enquiries and arrange calls: our legitimate interests in responding to you, or steps you've asked us to take before entering a contract.
  • To deliver services we have been engaged for: performance of a contract with you or your employer.
  • To keep records required by law and by our professional bodies (BACP, UKCP and HCPC): legal obligation and legitimate interests.
  • To understand how our website is used: your consent, given through our cookie banner.
  • To send updates or marketing emails: your consent. You can unsubscribe at any time.

We only process health information where it is needed to provide therapy, supervision or wellbeing services. We do this under Article 9(2)(h) of the UK GDPR (provision of health or social care), or with your explicit consent.

Confidentiality in workplace programmes

When your employer engages us, what you share with us in one-to-one sessions is confidential. Reports to your organisation use anonymised or combined information unless you agree otherwise. We would only share identifiable information without your agreement where the law requires it or where there is a serious risk of harm to you or others.

Who we share data with

We do not sell your data. We use trusted service providers who process data on our behalf and only on our instructions, including:

  • Squarespace: website hosting, contact forms and website analytics
  • Calendly: booking calls
  • Google: Google Analytics, only if you accept analytics cookies
  • Our email and secure file storage providers

We may also share data where the law requires it, or to protect someone from serious harm.

International transfers

Some of our providers store data outside the UK, including in the United States. Where this happens, the transfer is protected by UK adequacy regulations or by the UK International Data Transfer Agreement or Addendum.

How long we keep data

  • Enquiries that do not lead to work: up to 12 months after our last contact.
  • Client and session records: for as long as required by law and our professional bodies' guidance, normally up to 7 years after our work ends.
  • Website analytics: up to 14 months.

After this, we securely delete or anonymise the data.

Cookies

Cookies are small files stored on your device when you visit a website.

  • Essential cookies keep the site working and secure. They are always on.
  • Analytics cookies (such as Squarespace Analytics and Google Analytics) help us understand how people use the site. We only set these if you select "Accept all" or allow them under "Manage cookies".

You can change your choice at any time using the "Cookie Preferences" link on the page. You can also block or delete cookies in your browser settings.

Your rights

You have the right to:

  • ask for a copy of your data
  • ask us to correct data that is wrong
  • ask us to delete your data
  • ask us to restrict or stop using your data
  • object to us using your data
  • ask for your data in a portable format
  • withdraw your consent at any time, where we rely on consent

To use any of these rights, email privacy@incorporatetherapy.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at www.ico.org.uk or on 0303 123 1113. We would appreciate the chance to deal with your concern first.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.