Privacy Notice

This notice explains what I do with the information you share with me — both when you make an enquiry through this website and, if we go on to work together, in the course of therapy.

Who is responsible for your information

Sana Fatima Psychotherapy is a trading name of MySafeTherapy Ltd, a company registered in England and Wales (company number 16357386). MySafeTherapy Ltd is the data controller for the information described here and is registered with the Information Commissioner’s Office under registration number ZB909398. You can contact me about anything in this notice at [email protected].

What I collect, and when

When you send an enquiry: your name, the contact details you give me, and whatever you choose to tell me about what brings you. You decide how much to share.

If we begin working together: the information necessary to provide therapy safely — contact details, an emergency contact and GP details where appropriate, and clinical notes made during our work.

This website runs no analytics, tracking or advertising cookies. Your visit is not monitored or profiled.

The legal basis for using it

Most personal information is processed on the basis of legitimate interests (responding to your enquiry, running a professional practice) or contract (delivering therapy we have agreed).

Information about your health — including anything you tell me in therapy — is special category data under UK GDPR. I process it under Article 9(2)(h): the provision of health care by a professional bound by a duty of confidentiality. Where that basis does not apply, I rely on your explicit consent, which you are free to withdraw.

Who sees it

Ordinarily, only me. I do not sell information and I do not share it for marketing.

A small number of others are necessarily involved in running a safe practice: my clinical supervisor (with whom clients are discussed only in anonymised form); my website provider Webflow, on whose servers enquiry submissions are stored before they reach me; my email provider; and, for online sessions, the secure video platform we use — Microsoft Teams, Zoom or Google Meet. These providers act as data processors under contract.

The limits of confidentiality

Therapy is confidential, and I explain this fully before we begin. There are narrow circumstances in which I may need to share information without your consent: where there is a serious risk to your life or someone else’s, where a child or vulnerable adult may be at risk of harm, where certain serious crimes are involved, or where a court orders disclosure. Wherever it is safe and possible, I will discuss it with you first.

How long I keep it

Enquiries that do not lead to therapy are deleted within six months. Clinical records are retained for two years after the end of therapy, kept securely and no longer than necessary.

How it is protected

Records are stored securely and encrypted, and online sessions take place over an encrypted video connection. I take reasonable technical and organisational measures to protect your information; no system is perfectly secure, but I treat everything you share as clinical material.

Your rights

You have the right to ask for a copy of the information I hold about you, to have inaccuracies corrected, to object to or restrict processing, and in some circumstances to have information erased. Rights over clinical records are not absolute — professional and legal obligations may require me to retain them.

To exercise any of these rights, write to [email protected]. If you are unhappy with how I have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.