Privacy Policy
Last updated: [18-09-2026]
This Privacy Policy explains how I collect, use, store and protect your personal information when you visit livingpsych.com, make contact, book a session, or engage in therapy with me. I take your privacy seriously — this is both a legal obligation and a core part of how I work as a therapist.
Who I am
I'm George Lee, a BABCP-accredited CBT therapist, trading as Living Psych. I provide online CBT therapy on a self-employed basis, and I am the data controller of your personal information under UK data protection law — meaning I decide how and why it's collected and used, and comply with the UK GDPR and Data Protection Act 2018.
Contact: george.lee@livingpsych.com
ICO registration number: ZC176068
BABCP Accreditation: 1030513
Information I collect
When you browse this website: basic technical information such as your IP address, browser type, and pages visited, typically collected through cookies or similar technologies (see "Cookies" below).
When you make contact or book a discovery call: your name, email address, and any details you choose to share in a contact form or booking request.
If you become a client: information necessary to provide therapy safely and effectively — this may include your name, contact details, date of birth, GP details where relevant, information about your presenting difficulties, and clinical notes made during and between sessions. Information relating to your mental or physical health is classed under UK GDPR as special category data, which carries additional legal protections beyond ordinary personal data.
I only collect what's necessary to provide safe, ethical, and effective therapy — no more than that.
Why I process your information, and my legal basis
Purpose: Responding to enquiries and discovery call bookings.
Legal Basis: Legitimate interests, in responding to your request.
Providing therapy, including clinical notes.
Performance of our agreed contract, and your explicit consent for special category health data (UK GDPR Article 9).
Meeting professional and legal obligations (safeguarding, insurance, regulatory requirements)
Legal obligation, and substantial public interest in the provision of health/care services
Website cookies and analytics
Consent (see "Cookies" below)
Where I rely on consent — for clinical notes, or non-essential cookies — you can withdraw it at any time. For clinical records specifically, some retention continues regardless of consent withdrawal, due to my professional and insurance obligations as a therapist.
Confidentiality
Everything discussed in therapy is treated as confidential. There are a small number of circumstances in which I may need to break confidentiality, in line with my professional obligations as a BABCP-accredited therapist:
If I believe you or someone else is at serious risk of harm
If disclosure is required by law, such as a court order
In the event of a safeguarding concern involving a child or vulnerable adult
For anonymised clinical supervision, a required and standard part of safe, ethical practice
Where possible, I'd discuss this with you before any disclosure is made. This is explained more fully in your therapy agreement at the start of our work together.
Who I share your information with
I don't sell or share your personal information for marketing purposes. I may share limited information with:
My clinical supervisor, on an anonymised or pseudonymised basis, as a required part of ethical practice
My professional indemnity insurer, if relevant to a claim or complaint
Regulatory or professional bodies (such as BABCP or the Professional Standards Authority), if required as part of a complaint or fitness-to-practise process
Microsoft Teams, used to hold video sessions
Law enforcement or other authorities, where legally required or where safeguarding requires it
I do not routinely transfer your personal data outside the UK. Where a service I use stores data outside the UK, I take reasonable steps to ensure it's protected to a UK GDPR-equivalent standard, such as through the provider's Standard Contractual Clauses.
How long I keep your information
Client clinical records: retained for 7 years after our work together ends (or, for a client who was a minor, until 7 years after their 18th birthday), in line with standard professional guidance for talking therapies
General enquiries that don't lead to therapy: retained for no longer than 12 months, unless you ask me to delete them sooner
Financial and invoicing records: retained for 6 years, as required by HMRC
After the relevant period, records are securely destroyed or anonymised.
How your information is kept secure
I take reasonable technical and organisational steps to protect your information, including:
Storing clinical notes securely, with access limited to myself and, where relevant, my clinical supervisor on an anonymised basis
Not storing client-identifiable clinical material in unsecured formats, such as plain email
Generating a fresh video call link for each session, rather than reusing a static link
No online system is completely secure, but I take proportionate, professional-standard precautions given the sensitivity of the information involved.
Cookies
This website may use cookies or similar technologies to help it function and to understand how visitors use it. Where cookies aren't strictly necessary for the site to work, I'll ask for your consent before they're set.
Your rights
Under UK GDPR, you have the right to:
Ask what personal information I hold about you, and receive a copy
Ask me to correct inaccurate information
Ask me to delete your information, though this is limited for clinical records where I have a legal or professional duty to retain them for a set period
Object to, or ask me to restrict, certain types of processing
Withdraw consent at any time, where consent is the basis for processing
Complain to the Information Commissioner's Office (ICO) if you believe your data has been mishandled — ico.org.uk, or 0303 123 1113
To exercise any of these rights, contact me at george.lee@livingpsych.com.
Links to other websites
This site may contain links to other websites not owned or controlled by me. I'm not responsible for the privacy practices of third-party sites, and I'd encourage you to read their own privacy policies before sharing information with them.
Changes to this policy
I may update this policy from time to time, for example to reflect changes in the law or in how I work. The date at the top shows when it was last reviewed.
Contact
If you have any questions about this policy or how your information is handled, please contact me at george.lee@livingpsych.com.
https://livingpsych.com website is owned by LivingPsych, which is a data controller of your personal data.
We have adopted this Privacy Policy, which determines how we are processing the information collected by https://livingpsych.com, which also provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using https://livingpsych.com website.
We take care of your personal data and undertake to guarantee its confidentiality and security.
Personal information we collect:
When you visit the https://livingpsych.com, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the installed cookies on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site. We refer to this automatically-collected information as “Device Information.” Moreover, we might collect the personal data you provide to us (including but not limited to Name, Surname, Address, payment information, etc.) during registration to be able to fulfill the agreement.
Why do we process your data?
Our top priority is customer data security, and, as such, we may process only minimal user data, only as much as it is absolutely necessary to maintain the website. Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding website usage. This statistical information is not otherwise aggregated in such a way that it would identify any particular user of the system.
You can visit the website without telling us who you are or revealing any information, by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the website’s features, or you wish to receive our newsletter or provide other details by filling a form, you may provide personal data to us, such as your email, first name, last name, city of residence, organization, telephone number. You can choose not to provide us with your personal data, but then you may not be able to take advantage of some of the website’s features. For example, you won’t be able to receive our Newsletter or contact us directly from the website. Users who are uncertain about what information is mandatory are welcome to contact us via george.lee@livingpsych.com.
Your rights:
If you are a European resident, you have the following rights related to your personal data:
The right to be informed.
The right of access.
The right to rectification.
The right to erasure.
The right to restrict processing.
The right to data portability.
The right to object.
Rights in relation to automated decision-making and profiling.
If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you (for example, if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information might be transferred outside of Europe, including Canada and the United States.
Links to other websites:
Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for such other websites or third parties' privacy practices. We encourage you to be aware when you leave our website and read the privacy statements of each website that may collect personal information.
Information security:
We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, and personal data disclosure in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.
Legal disclosure:
We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
Contact information:
If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to george.lee@livingpsych.com.