Mindful UK – Privacy Policy
Last updated: 03 Sep 2026

1. Who we are
Mindful UK ("we", "us", "our") runs www.mindful-uk.com, a directory that connects members of the public with qualified therapists across the UK. We are the data controller for the personal information we collect through this website, and we are committed to handling it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy explains what information we collect, why we collect it, who we share it with, and the rights you have. It applies to everyone who uses our website, including visitors, people looking for a therapist, and therapists who list with us.
Contact us about your data: support@mindful-uk.com
Registered business name and address: [insert legal entity name and postal address]
ICO registration number: [insert, if registered]
Mindful UK is a directory, not a therapy provider. Once you contact a therapist through our site, that therapist becomes responsible for how they handle your information in your sessions, under their own privacy policy and professional obligations.

2. Information we collect
If you contact us or enquire about therapy, we collect what you enter into our forms: your name, email address, phone number, postal address and the content of your message.
If you create an account, we collect your login details, profile information and account settings.
If you are a therapist joining our directory, we collect your name, contact details, professional qualifications and level of training, membership body and registration numbers, the therapies and conditions you work with, your location and availability, your photo and biography, and payment and billing details for membership.
When you browse our website, we automatically collect technical information such as your IP address, browser and device type, pages visited, time spent on pages and how you arrived at our site. Some of this is collected through cookies (see section 5).
Health and other sensitive information. Because our site relates to mental health, messages you send us may reveal information about your health, wellbeing or personal circumstances. This is "special category data" under UK GDPR and we treat it with extra care. Please share only what is needed for us to help you find a therapist. We never use this information for advertising.

3. How we use your information and our lawful basis
UK GDPR requires us to have a lawful basis for each way we use your data.
What we use it for
Lawful basis
Responding to your enquiry and helping you find a suitable therapist
Legitimate interests; explicit consent for any health information you share
Creating and managing your account
Contract
Listing therapists in the directory, taking membership payments and managing membership
Contract
Checking therapists' qualifications and professional membership
Legitimate interests (keeping the directory safe and trustworthy)
Promoting listed therapists through our marketing, including social media and Meta advertising
Contract (as part of membership) or consent
Sending newsletters and marketing emails
Consent (you can unsubscribe at any time)
Running, securing and improving our website
Legitimate interests
Analytics and advertising cookies
Consent
Keeping records for tax, accounting and legal purposes
Legal obligation
We do not sell your personal information, and we do not use automated decision-making that has legal or similarly significant effects on you.

4. Who we share your information with
We share personal information only where necessary, and only with:

• Therapists in our directory – if you ask us to connect you with a therapist, we pass on your contact details and enquiry to that therapist.

• Website and hosting provider – our website is built and hosted on Wix.com, which stores form submissions, account data and site analytics on our behalf.

• Payment processors – membership payments are handled by secure third-party providers (such as Wix Payments or Stripe). We do not store full card details.

• Email and marketing tools – used to send newsletters and updates to people who have opted in.

• Advertising platforms – such as Meta (Facebook and Instagram), where we promote our listed therapists and, with your consent, use cookies to measure our advertising.

• Professional advisers and authorities – our accountants, legal advisers, regulators or law enforcement, where required by law.

All service providers act on our instructions and must keep your information secure.
International transfers. Some of our providers, including Wix and Meta, may process data outside the UK, for example in the United States or the European Economic Area. Where this happens, we rely on UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses to keep your information protected.

5. Cookies
Cookies are small files placed on your device when you visit a website. We use:

• Essential cookies – needed for the site to work, such as keeping you logged in and securing forms. These do not require consent.

• Analytics cookies – help us understand how visitors use the site so we can improve it.

• Advertising cookies – such as the Meta Pixel, which help us measure and improve our advertising.

We only set analytics and advertising cookies if you agree through our cookie banner. You can change your choice at any time using the cookie settings link on our website, or by adjusting your browser settings. Blocking some cookies may affect how the site works.

6. How long we keep your information
We keep personal information only as long as we need it:

• Enquiries – up to 12 months after our last contact with you.

• Accounts and therapist listings – for as long as your account or membership is active, then deleted within 6 months of closure.

• Financial and billing records – 6 years, as required by HMRC.

• Marketing preferences – until you unsubscribe or withdraw consent.

7. Keeping your information secure
We use appropriate technical and organisational measures to protect your data, including encrypted (HTTPS) connections, secure hosting, restricted access and strong passwords. No online system is completely secure, but we work to protect your information and will notify you and the Information Commissioner's Office (ICO) of any serious breach where the law requires us to.

8. Your rights
Under UK data protection law, you have the right to:

• access the personal information we hold about you

• ask us to correct inaccurate or incomplete information

• ask us to delete your information

• ask us to restrict or pause how we use it

• object to us using it, including for direct marketing

• receive your information in a portable format

• withdraw your consent at any time, where we rely on consent

To use any of these rights, email support@mindful-uk.com. We will respond within one month. There is usually no charge.

9. Complaints
If you have concerns about how we handle your data, please contact us first at support@mindful-uk.com so we can try to put things right. You also have the right to complain to the Information Commissioner's Office on 0303 123 1113.

10. Children
Our website and directory are intended for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us their information, please contact us and we will delete it.

11. If you need urgent help
Mindful UK is not an emergency or crisis service, and messages to us are not monitored around the clock. If you are in immediate danger, call 999. For free, confidential support at any time, call the Samaritans on 116 123.

12. Links to other websites
Our site links to therapists' own websites and other external sites. We are not responsible for their privacy practices, so please read their privacy policies.

13. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.

Questions? Email us at support@mindful-uk.com.