Privacy Policy

Last updated: 22 Aug 2025

1. Introduction

Achilles Heal is committed to protecting your privacy and ensuring that your personal data is handled securely and lawfully.

This Privacy Policy explains how we collect, use, and protect your information when you visit our website https://achilles-heal.com or contact us for therapy services.

2. Who We Are

We are a psychotherapy practice based in the UK. Our contact details are:

Email: info@achilles-heal.com

3. The Information We Collect

We may collect the following information:

Personal details (name, email address, phone number) when you contact us or book an appointment

Health information you share during therapy or on intake forms (special category data, handled with extra care)

Technical information (browser type, device information) through cookies and analytics tools

4. How We Use Your Information

We will only use your personal data for:

Responding to your enquiries
Providing psychotherapy or related services
Managing appointments and client records
Processing payments
Complying with legal or regulatory obligations
Improving our Website and services

We will never sell or rent your personal data to third parties.

5. Lawful Basis for Processing

We process personal data under the following legal bases (as defined by the UK GDPR):

Contract – to provide you with therapy services
Consent – when you agree to receive communications or marketing
Legal obligation – to comply with applicable laws and professional requirements
Legitimate interests – to operate and improve our Website and services

6. How We Store Your Data

Client records are stored securely in password-protected, GDPR-compliant systems.

Health-related information is stored separately from other personal data.

We retain personal data only for as long as necessary to fulfil our obligations (typically 7 years after therapy ends, in line with professional guidance).

7. Sharing Your Information

We may share your personal data only with:

Professional supervisors (in anonymised form, for clinical quality assurance)
IT and administrative service providers who are GDPR-compliant
Legal or regulatory bodies, if required by law or to prevent harm

8. Your Rights

Under UK data protection law, you have the right to:

Access a copy of your personal data
Request corrections to inaccurate data
Request deletion of your data (where applicable)
Restrict or object to certain processing
Withdraw consent at any time (where consent is the legal basis)

9. Cookies and Analytics

Our Website uses cookies to improve your experience and analyse site usage.

You can set your browser to refuse cookies, but some site functions may not work properly.

For more details, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time.

The updated version will be posted on this page with the new “last updated” date.

For privacy-related questions, contact: