Privacy Policy

Last updated: May 2025  ·  Noor Psychology, Lancashire, UK

1. Who we are

Noor Psychology is a private psychology practice operated by Shabana, a BABCP-accredited Cognitive Behavioural Therapist, based in Lancashire, England. For data protection purposes, Shabana is the data controller for the personal information you provide to this website and through our services.

2. What information we collect

We may collect the following types of personal information:

• Contact information — your name, email address and phone number when you make an enquiry or book an appointment.
• Health information — relevant mental health history and therapeutic goals shared during assessment and treatment. This is treated as special category data under UK GDPR.
• Workshop registrations — your name and email address when you register interest in a workshop.
• Website usage data — anonymous analytics data (via cookies) about how you navigate this website.

3. How we use your information

We use your personal information to:

• Respond to your enquiries and provide therapy services
• Book and manage appointments
• Maintain clinical notes as required by professional and legal standards
• Send you information about workshops you have registered interest in
• Improve the website and our services

Our lawful basis for processing health data is Article 9(2)(h) UK GDPR (health care purposes) and, where applicable, your explicit consent.

4. How we store and protect your data

All personal data is stored securely using password-protected, encrypted systems. Clinical notes are held in a secure, UK-based platform. We do not sell, rent or share your personal data with third parties except where required by law (e.g. safeguarding duties) or with your explicit consent.

5. Data retention

Clinical records are retained for a minimum of 7 years following the end of treatment (or until a child reaches 25, whichever is later), in line with professional guidance. General contact and enquiry data is deleted after 2 years if no therapeutic relationship has been established.

6. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal obligations)
• Object to or restrict processing
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

7. Contact us

For any data protection queries, please contact us via the Contact page. We aim to respond within 5 working days.