Legal
Privacy Policy
The Great Thriving LTD ("we", "us", "our") is committed to protecting your privacy and handling your personal data lawfully, fairly and transparently, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Discretion is part of the service — invoices and calendar items are worded neutrally.
Data controller: The Great Thriving LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the Information Commissioner's Office (ICO), registration reference ZC056045.
What we collect
- Contact details you provide (name, email, phone, address, occupation, date of birth).
- Information shared during enquiry or therapy sessions, and clinical notes necessary for delivering counselling and psychotherapy services.
- Health information relevant to your care, including medication details.
- Details of your GP or doctor.
- Emergency contact and next-of-kin details.
Why we collect it
To provide and manage therapeutic services, respond to enquiries, maintain clinical records as required by our professional body (BACP), meet our professional and legal obligations, and — where there is a serious risk to your safety or the safety of others — to contact your named emergency contact, next-of-kin, or GP.
Lawful basis
We process your data on the basis of your consent, the performance of our service contract with you, our legitimate interests in running the practice, and our legal obligations. Special category (health) data, including medication information, is processed for the provision of health and social care under Article 9(2)(h) UK GDPR, and in situations involving a risk to life or serious harm, to protect the vital interests of you or another person under Article 9(2)(c) UK GDPR.
Third-party data
Where you provide details of a next-of-kin, emergency contact, or GP, you confirm you have their permission to share their information with us. We use these details only to contact them in an emergency or, with your consent, as part of coordinating your care. We will inform such individuals of how their data is held on request.
Third-party processors
Sessions are delivered via secure video platforms (Microsoft Teams and Google Meet). These providers process data on our behalf under their own privacy terms. We do not sell your data to anyone.
Data retention
Clinical records are retained in line with professional and legal requirements, then securely deleted.
Your rights
You have the right to access, correct, delete, restrict or object to the processing of your data, and to data portability. To exercise any of these rights, or to raise a concern, contact us at mark@greatthriving.com.
Complaints
You have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.
This policy may be updated from time to time. Last updated: 10 July 2026.