Privacy Policy

1. Introduction

Pink Therapy is committed to protecting your personal data and ensuring it is processed lawfully, transparently, and securely.
This Privacy Policy explains how personal data is collected, used, stored, and protected when you engage with Pink Therapy through:

• our website
• membership and directory services
• training, CPD, and accreditation
• conferences and events
• direct contact with our team

This policy applies to:

• Pink Therapy Services Limited (Company No. 13801239)
• Pink Therapy Training Limited (Company No. 13801188)

Both entities operate under the Pink Therapy brand and are registered with the UK Information Commissioner’s Office (ICO) as data controllers.
Registered office:
Tudor House, 16 Cathedral Road, Cardiff, CF11 9LJ
This policy should be read alongside our Terms & Conditions.

2. Our Role and Scope

Pink Therapy provides:

• a professional membership and directory framework
• training, CPD, and accreditation services
• conferences and events
• information and resources relating to LGBTQ+ mental healt

Important: Scope of Responsibility

Pink Therapy:

• does not provide therapy
• does not deliver clinical supervision
• does not regulate practitioners
• does not provide clinical governance
• does not oversee therapeutic relationships
• does not access or store communications between practitioners and their clients

Practitioners listed in the Directory are:

• independent
• self-employed
• responsible for their own professional conduct, safeguarding, and legal compliance
• accountable to their own professional bodies where applicable

3. Data Controllers and Responsibilities

Pink Therapy Services Ltd (PTSL) acts as data controller for:

• membership
• directory listings
• website activity
• general enquiries

Pink Therapy Training Ltd (PTTL) acts as data controller for:

• training and CPD
• accreditation and re-accreditation
• conference and event participation
• Independent Practitioner Responsibility

Practitioners listed in the Directory are independent data controllers in respect of their own clients and are responsible for:

• GDPR compliance
• clinical record-keeping
• safeguarding
• confidentiality

Pink Therapy does not access or process client data held by practitioners.

4. What Personal Data We Collect

4.1 Website Users

We collect:

• IP address
• device and browser information
• usage data and navigation
• cookie preferences

4.2 Directory Registrants and Members

We collect:

• name, pronouns, and contact details
• professional qualifications, registrations, and experience
• practice areas, modalities, and specialisms
• directory profile information (including content you choose to publish)
• membership status and history
• billing and payment information

4.3 Training, CPD and Accreditation

We collect:

• application and booking details
• training participation and attendance records
• accreditation submissions and supporting documentation
• assessment outcomes
• course access and engagement data

4.4 Special Category Data

To support inclusive directory search and representation, we may collect:

• gender identity
• sexual orientation
• ethnicity
• disability or neurodivergence
• religion or spiritual identity

This data is:

• provided voluntarily
• processed only with explicit consent
• used solely for improving matching, representation, and visibility

Consent may be withdrawn at any time.

4.5 Enquiries and Communication

When you contact us, we may collect:

• your name
• email address
• any information you choose to share
• We treat all communications confidentially.

5. How We Use Personal Data

We use personal data to:

Deliver Services

• manage membership and directory listings
• deliver training, accreditation, and events
• administer payments and subscriptions

Communicate

• respond to enquiries
• send service-related information
• provide updates and relevant communications

Operate and Improve

• analyse website usage
• improve services and user experience

Meet Legal Obligations

• maintain financial records
• comply with regulatory and legal requirements
• prevent fraud and misuse

6. Lawful Basis for Processing

We rely on:

• Contract: to provide services you have requested
• Legitimate Interests: service improvement and operations
• Consent: marketing communications and special category data
• Legal Obligation: compliance and financial record-keeping

7. Accreditation and Professional Assessment

Where accreditation is offered:

• personal data is processed as part of a structured professional assessment process
• assessment is based on submitted evidence and defined criteria

Important

Pink Therapy:

• does not act as a clinical regulator
• does not provide ongoing oversight or monitoring of practice
• does not supervise or intervene in therapeutic work

Accreditation represents a defined assessment outcome, not regulatory authority.

8. Cookies

We use cookies to:

• ensure functionality
• enhance performance
• analyse site use

You can manage your preferences via our cookie banner and browser settings.

9. Sharing Personal Data

We may share data with:

• IT and hosting providers
• payment processors (e.g. Stripe, PayPal)
• communication platforms
• service delivery tools

All third parties are subject to contractual data protection obligations.

We do not:

• sell personal data
• allow third-party marketing use

10. International Transfers

Where data is transferred outside the UK:

• appropriate safeguards are applied
• this may include Standard Contractual Clauses or adequacy decisions

11. Data Retention

We retain data only as long as necessary:

• membership and directory data: whilst active and up to 12 months after
• training and accreditation records: for operational and audit purposes
• financial records: 6 years
• enquiries: up to 12 months
• analytics data: up to 26 months

12. Your Rights

You have the right to:

• access your data
• correct inaccurate data
• request deletion
• restrict or object to processing
• withdraw consent
• request portability
• complain to the ICO

13. Security

We implement appropriate measures including:

• secure hosting and encryption
• access controls and authentication
• staff confidentiality obligations

No system is completely secure, but we take all reasonable steps to protect data.

14. Complaints and Data Concerns

If you have concerns about how your data is handled:

• contact us in the first instance
• we will review and respond appropriately

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Pink Therapy may review concerns relating to:

• membership
• directory participation
• use of services

We do not investigate clinical complaints relating to practitioner–client work.

15. Updates to This Policy

We may update this policy from time to time.
The latest version will always be published on our website.

16. Contact

For training-related questions, please email training@pinktherapy.org
For directory-related questions, please email directory@pinktherapy.com

Document Control and Review

• Document Title: Privacy Policy
• Version: 1.0
• Effective Date: 06/07/2026
• Approved By: [Alexis Caught- Operations Director]
• Date of Approval: [29/06/2026]
• Next Review Date: [29/06/2027]