Pink Therapy is committed to protecting your personal data and ensuring it is processed lawfully, transparently and securely. This policy explains how personal data is collected, used, stored and protected when you engage with Pink Therapy through our website, membership and directory services, training, CPD and accreditation, conferences and events, or direct contact with our team.
This policy applies to Pink Therapy Services Limited (Company No. 13801239) and Pink Therapy Training Limited (Company No. 13801188). Both entities operate under the Pink Therapy brand and are registered with the UK Information Commissioner's Office as data controllers. Registered office: Tudor House, 16 Cathedral Road, Cardiff, CF11 9LJ. This policy should be read alongside our Terms and Conditions.
Pink Therapy provides a professional membership and directory framework, training, CPD and accreditation services, conferences and events, and information and resources relating to LGBTQ+ mental health.
Scope of Responsibility
Pink Therapy does not provide therapy, does not deliver clinical supervision, does not regulate practitioners, does not provide clinical governance, does not oversee therapeutic relationships, and does not access or store communications between practitioners and their clients.
Practitioners listed in the Directory are independent, self-employed, responsible for their own professional conduct, safeguarding and legal compliance, and accountable to their own professional bodies where applicable.
Pink Therapy Services Ltd acts as data controller for membership, directory listings, website activity and general enquiries. Pink Therapy Training Ltd acts as data controller for training and CPD, accreditation and re-accreditation, and conference and event participation.
Independent Practitioner Responsibility
Practitioners listed in the Directory are independent data controllers in respect of their own clients, and are responsible for GDPR compliance, clinical record-keeping, safeguarding and confidentiality. Pink Therapy does not access or process client data held by practitioners.
Website Users
IP address, device and browser information, usage data and navigation, and cookie preferences.
Directory Registrants and Members
Name, pronouns and contact details; professional qualifications, registrations and experience; practice areas, modalities and specialisms; directory profile information, including content you choose to publish; membership status and history; and billing and payment information.
Training, CPD and Accreditation
Application and booking details, training participation and attendance records, accreditation submissions and supporting documentation, assessment outcomes, and course access and engagement data.
Special Category Data
To support inclusive directory search and representation, we may collect gender identity, sexual orientation, ethnicity, disability or neurodivergence, and religion or spiritual identity. This data is provided voluntarily, processed only with explicit consent, and used solely for improving matching, representation and visibility. Consent may be withdrawn at any time.
Enquiries and Communication
When you contact us, we may collect your name, email address, and any information you choose to share. We treat all communications confidentially.
We use personal data to deliver services, including managing membership and directory listings, delivering training, accreditation and events, and administering payments and subscriptions. We use it to communicate with you, including responding to enquiries and sending service-related information. We use it to operate and improve our services, including analysing website usage. We also use it to meet our legal obligations, including maintaining financial records, complying with regulatory requirements, and preventing fraud and misuse.
We rely on Contract, to provide services you have requested; Legitimate Interests, for service improvement and operations; Consent, for marketing communications and special category data; and Legal Obligation, for compliance and financial record-keeping.
Where accreditation is offered, personal data is processed as part of a structured professional assessment process, based on submitted evidence and defined criteria.
Important
Pink Therapy does not act as a clinical regulator, does not provide ongoing oversight or monitoring of practice, and does not supervise or intervene in therapeutic work. Accreditation represents a defined assessment outcome, not regulatory authority.
We use cookies to ensure functionality, enhance performance and analyse site use. You can manage your preferences via our cookie banner and browser settings.
We may share data with IT and hosting providers, payment processors such as Stripe and PayPal, communication platforms, and service delivery tools. All third parties are subject to contractual data protection obligations. We do not sell personal data or allow third-party marketing use.
Where data is transferred outside the UK, appropriate safeguards are applied. This may include Standard Contractual Clauses or adequacy decisions.
We retain data only as long as necessary: membership and directory data whilst active and up to 12 months after; training and accreditation records for operational and audit purposes; financial records for 6 years; enquiries for up to 12 months; and analytics data for up to 26 months.
You have the right to access your data, correct inaccurate data, request deletion, restrict or object to processing, withdraw consent, request portability, and complain to the ICO.
We implement appropriate measures including secure hosting and encryption, access controls and authentication, and staff confidentiality obligations. No system is completely secure, but we take all reasonable steps to protect data.
If you have concerns about how your data is handled, please contact us in the first instance and we will review and respond appropriately. You also have the right to lodge a complaint with the Information Commissioner's Office. Pink Therapy may review concerns relating to membership, directory participation, or use of services. We do not investigate clinical complaints relating to practitioner-client work.
We may update this policy from time to time. The latest version will always be published on our website.
For training-related questions or directory-related questions, please use our contact form and select the relevant subject from the dropdown.
Document: Privacy Policy · Version 1.0 · Effective Date: 06/07/2026
Approved by: Alexis Caught, Operations Director · Date of Approval: 29/06/2026
Next Review Date: 29/06/2027