Privacy Policy

BegintoListen website is owned by Begintolisten, which is a data controller of your personal data.

We have adopted this Privacy Policy, which determines how we are processing the information collected by BegintoListen, which also provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using BegintoListen website.

We take care of your personal data and undertake to guarantee its confidentiality and security.

The Data I Collect & Why I Collect It

I operate on a principle of minimal data collection to protect client privacy. I only collect the following personal information:

When you visit BegintoListen, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the installed cookies on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site. We refer to this automatically-collected information as “Device Information.” We will also collect; Identity Data: Your full name. Contact Data: Your email address and phone number and Usage Data: Payment confirmation records sent by my payment processors (excluding raw card details).

Lawful Basis for Processing:

• Contract: I require your name, email address, and phone number to fulfill our agreement (e.g., booking and scheduling sessions, sending calendar invites, providing invoice receipts, or contacting you directly regarding scheduling changes).

• Functionality: To enable smooth use of the website, the website requires 'Device information'.

• Legal Obligation: To maintain accurate financial records for UK tax purposes (HMRC).

How I Protect Your Clinical Privacy (Session Notes)

Your therapeutic confidentiality is paramount. I do not store your clinical or session data alongside your personal identity. And no session notes are recorded or held online.

• Strict Anonymisation: Any case notes I write during or after our sessions are fully anonymised and are not held on a computer.

Payment Processing & Third-Party Security

I do not collect, view, or store your credit/debit card numbers, bank details, or device account numbers.

• Third-Party Processors: All financial transactions are handled securely through Stripe and Apple Pay, which are independent, PCI-DSS Level 1 compliant payment gateways.

• Data Scope: When you make a payment, you provide your billing data directly to the payment gateway. My practice only receives a secure verification token, the date of the transaction, and the amount paid to match against my accounting software.

Data Sharing & Disclosures

I will never sell, rent, or distribute your personal details to third parties for marketing purposes. Your data is only shared under the following conditions:

• Legal & Tax Obligations: With HM Revenue & Customs (HMRC) or my accountant strictly for legal tax reporting.

• Safeguarding & Crucial Exceptions: In exceptional circumstances where I am legally or ethically compelled to breach confidentiality (e.g., if I believe there is a severe risk of serious harm to yourself or others, or under a court order). Where safe and legal to do so, I will always attempt to discuss this with you first.

Data Retention

• Administrative Data: Your name, email, phone number, and transaction history are retained for 7 years following the end of our tax year, as legally required by HMRC.

• Anonymised Notes: Because my session notes do not constitute "personal data" under the UK GDPR (as they cannot identify you), they may be kept securely for [e.g., 5 to 7 years] in accordance with my professional insurance requirements before being permanently destroyed.

Your Rights Under UK GDPR ; considered the gold standard for global data protection rights.

You hold the following rights regarding the personal data I keep (your name, email, and phone number):

• The right to access the personal data I hold about you.

• The right to correct any inaccurate personal information.

• The right to request the erasure of your data (subject to HMRC retention laws).

• The right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled (www.ico.org.uk).

Links to other websites:

Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for such other websites or third parties' privacy practices. We encourage you to be aware when you leave our website and read the privacy statements of each website that may collect personal information.

Information security:

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, and personal data disclosure in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.

Legal disclosure:

We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Contact information:

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to rachel@begintolisten.com