Effective date: 6 October 2026

Who I am

Natalie May Therapy is run by Natalie May McLeod. I am the data controller for the information you give me. You can contact me at hello@nataliemaytherapy.com. I am registered with the Information Commissioner's Office (ICO).

What I collect

When you become a client, I collect your contact details, your date of birth and GP details, information about your health and wellbeing (including the consultation form and the GAD-7 and PHQ-9 questionnaires), notes from our sessions, and payment records.

Why I use it

I use your information to provide therapy, keep appropriate records, take payment, and keep you safe. The legal basis is that it is necessary to provide health care and to carry out the agreement between us. I will ask for your consent separately where I need it, for example before contacting your GP.

Who I share it with

I do not sell your information. I use trusted providers to run my practice: Zanda (practice management and online forms), and Zoom for online sessions. They only process information on my behalf. I will share information with your GP or another professional only if you agree, or if I believe you or someone else is at risk of serious harm or the law requires it. I will tell you first where I can.

How long I keep it

I keep adult client records for 7 years after our last session. Records for clients under 18 are kept until the client's 25th birthday. After that I delete them securely.

Your rights

You can ask to see the information I hold, correct it, or ask me to delete it where the law allows. You can also complain to the Information Commissioner's Office at ico.org.uk.

Questions

Contact me at hello@nataliemaytherapy.com