Privacy Policy

Last updated: July 2025

This notice explains what personal information Numa Therapy collects, why we collect it, and what your rights are. We take privacy seriously — particularly given the sensitive nature of therapy. If you have any questions, please get in touch at info@numatherapy.co.uk.

1. Who We Are

The data controller is Reuben Alexander, trading as Numa Therapy.

Reuben Alexander is a registered member of the British Association for Counselling and Psychotherapy (BACP) and the National Counselling and Psychotherapy Society (NCPS), and processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Information We Collect

Website visitors

When you visit this website, our hosting provider (Netlify) automatically collects standard server log data, including your IP address, browser type, and pages visited. This is processed on the basis of legitimate interest to maintain website security and performance. Netlify may also set technical cookies necessary for the site to function — see the Cookies section below.

This website loads fonts from Google Fonts (fonts.googleapis.com). When your browser requests a font from Google's servers, your IP address is transmitted to Google LLC. No persistent cookie is set in your browser by this request. For more detail, see Google's Privacy Policy.

Anxiety assessment quiz

If you complete the free anxiety assessment on this website, we collect:

  • Your first name
  • Email address (if you choose to provide it after viewing your results)
  • Phone number (optional)
  • Your responses to the five quiz questions and your calculated score

This information is processed on the basis of legitimate interest — to respond to your enquiry and assess whether therapy may be appropriate for you. You can view your quiz results without providing any contact details.

Contact form enquiries

When you submit the contact form on the main website, we collect your name, email address, the reason for your enquiry, and any message you provide. This is processed on the basis of legitimate interest to respond to your enquiry.

Service agreement

Before therapy begins, we ask you to complete a service agreement. This collects your full name, email address, phone number, home address, and an emergency contact. This is processed on the basis of contract — it is necessary to enter into a therapeutic agreement with you.

Therapy clients

As part of the therapeutic relationship, we collect and process:

  • Contact and personal details (as above)
  • Clinical notes from sessions
  • Information about your health, mental wellbeing, and personal history

Health information is special category data under UK GDPR. We process this on the basis of your explicit consent and because it is necessary for the provision of psychological therapy (Article 9(2)(h) — healthcare purposes). You may withdraw consent at any time, though this may mean we are unable to continue providing therapy.

3. How Long We Keep Your Data

  • Website enquiries and quiz data where therapy did not commence: Up to 12 months from the date of contact.
  • Client records (including clinical notes): 7 years from the date of the last session, in line with BACP guidance for adult clients.
  • Financial records: 6 years, as required by HMRC.
  • Server logs: As determined by Netlify's data retention policy.

After the relevant retention period, data is securely deleted.

4. Who We Share Your Data With

We do not sell or rent your personal information. We may share limited information with the following:

  • Netlify, Inc. — our website hosting and form submission provider. Form data submitted via this website is stored on Netlify's infrastructure. Netlify operates under appropriate data transfer safeguards for UK and EU data. See Netlify's Privacy Policy.
  • Clinical supervisor — as required by BACP ethical standards, case material may be discussed in professional supervision. Identifying details are kept to a minimum and the supervisor is bound by the same duty of confidentiality.
  • Statutory authorities — in the limited circumstances set out in the service agreement: where there is serious risk of harm to you or another person, where a court order requires disclosure, or where there is a legal obligation to report (e.g. terrorism or money laundering).
  • WhatsApp / Meta — if you choose to contact us via WhatsApp, your messages will be handled in accordance with WhatsApp's Privacy Policy.

5. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can ask us to correct inaccurate or incomplete data.
  • Right to erasure — you can ask us to delete your data, subject to our legal and professional obligations (for example, we may be required to retain clinical records for a minimum period).
  • Right to restrict processing — you can ask us to pause processing your data in certain circumstances.
  • Right to object — you can object to processing based on legitimate interest.
  • Right to data portability — where processing is automated and based on consent or contract, you can ask us to provide your data in a portable format.
  • Right to withdraw consent — where we process data on the basis of your consent, you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at info@numatherapy.co.uk. We will respond within one month.

6. Cookies

Cookies are small text files stored on your device when you visit a website. This website uses a small number of cookies.

Cookie Provider Purpose Duration
Technical / session cookies Netlify Required for form submissions and site security (bot protection). Cannot be disabled without breaking the site. Session
numa_cookie_consent Numa Therapy Stores your cookie preference so we don't ask you again. Persistent (local storage)

Google Fonts loads font files from Google's servers (fonts.googleapis.com). This is not a cookie but does transmit your IP address to Google as part of a standard HTTP request. No tracking cookie is set in your browser by this request.

We do not currently use any analytics, advertising, or tracking cookies. If this changes, this notice will be updated and your consent will be sought before any such cookies are placed.

You can manage or delete cookies at any time through your browser settings. Blocking essential cookies may affect the functionality of this website.

7. How to Complain

If you have a concern about how we handle your personal data, please contact us in the first instance at info@numatherapy.co.uk and we will do our best to resolve it.

If you remain unhappy with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

8. Changes to This Notice

We may update this privacy notice from time to time. The date at the top of this page shows when it was last revised. We encourage you to check back periodically.