top of page

Privacy Policy

1. Introduction

Harvest Moon Talking Therapy (“we”, “us”, “our”) offers counselling and psychotherapy services—including individual, couples, adolescent, trauma-informed, and family therapy—in Preston, Lancashire. We respect your privacy and comply with UK GDPR when you use our website, book sessions, or contact us.

2. Data Controller & Contact Details

Katie Robinson (Harvest Moon Talking Therapy)
Unit 8, Nelson Court Business Centre, Hardy Close, Preston PR2 2XP
07955 614 599 ·  katie.harvestmoon@protonmail.com
Katie is a trauma-informed, person-centred counsellor and psychotherapist, registered with BACP, offering compassionate care. 

3. Personal Data We Collect

  • Booking forms: name, email, phone, therapy type (individual, couples, adolescent), appointment preferences

  • Communications: phone, email, chat inquiries, in-session notes

  • Analytics: anonymised IP address, device/browser data, pages visited, session duration—via essential and performance cookies only; no advertising or profiling cookies are used. 

4. How We Use Your Data

Your data enables us to:

  • Arrange consultations and therapy sessions

  • Send confirmations, reminders, invoices, and post-session follow-ups

  • Provide safe, tailored therapeutic care (anxiety, depression, trauma, relationships, self-esteem, stress) 

  • Improve our website experience through anonymised analytics

  • Maintain records for legal, insurance, audit, and financial (VAT) compliance

5. Legal Basis for Processing

  • Contractual necessity: to provide therapy services

  • Legitimate interests: to manage and enhance our practice and website

  • Consent: for any optional marketing or follow-up communications

  • Legal obligation: retention of records for statutory and compliance purposes

6. Data Sharing

We do not sell or rent your personal data. We only share data with:

  • GDPR-compliant service providers (e.g., web hosting, email, analytics platforms)

  • Regulatory bodies, insurers, or legal authorities—only when legally required

7. Cookies & Tracking

  • Essential cookies: for site functionality and bookings

  • Performance cookies: anonymised analytics only
    No advertising, profiling, or third-party tracking cookies are used. 

8. Data Retention

  • Booking and session records: stored for up to 7 years

  • Anonymised analytics data: deleted after 24 months; aggregated data retained for service improvement

9. Your Rights

Under UK GDPR, you can:

  • Access, correct, delete, restrict, or export your personal data

  • Withdraw consent or object to processing

  • Lodge a complaint with the UK Information Commissioner’s Office (ICO)
    Contact Katie to exercise any of these rights.

10. Security

We protect your data using SSL encryption, secure UK hosting, access controls, firewalls, and professional training. While no system is entirely secure, we adhere to best-practice standards.

11. International Transfers

All personal data is processed and stored within the UK—no overseas transfers occur.

12. Policy Updates

We may update this policy periodically. Continued use of our website or services implies acceptance. The Effective Date above reflects the current version.

bottom of page