Privacy Policy

Last updated: September 2026

1. Who We Are

HQ Therapy Rooms LTD (Company No. 09915731) operates therapy centres in London. Our registered locations are 322C Kingsland Rd, London E8 4DE (Haggerston) and 1 Highbury Crescent, London N5 1RN (Highbury Fields). For data protection queries, contact us at hello@hqtherapy.com.

2. Information We Collect

We collect information you provide directly to us, including:

• Contact forms and enquiries — your name, email address, phone number, and message content when you contact us through our website.
• Newsletter subscriptions — your email address when you sign up for updates.
• Booking and assessment information — your name, contact details, and relevant information provided during the therapy assessment booking process.
• Payment information — processed securely by Stripe. We do not store your card details on our servers.

3. How We Use Your Information

We use personal information to:

• Respond to your enquiries and provide the services you request
• Process therapy assessment bookings and match you with appropriate therapists
• Process payments securely through our payment provider
• Send you updates and newsletters if you have opted in
• Improve our website and services through anonymised analytics

We will never sell, rent, or share your personal information with third parties for marketing purposes.

4. Cookies and Analytics

Our website uses cookies to improve your browsing experience and help us understand how visitors use our site. We use:

• Essential cookies — required for the website to function (e.g. session management, security).
• Analytics cookies — Google Analytics (via Google Tag Manager) collects anonymised data about page views, traffic sources, and user behaviour. No personally identifiable information is collected through analytics.
• Analytics cookies — Microsoft Clarity records anonymised session replays and heatmaps showing how visitors use the site. It only loads after you consent to analytics cookies.

You can manage cookie preferences through your browser settings or our cookie consent banner. Under UK PECR regulations, we will not set non-essential cookies without your consent.

5. Third-Party Services

We use the following third-party services to operate our website and business:

• Vercel — website hosting and delivery. Data is processed in accordance with Vercel’s privacy policy.
• Sanity — content management system for website content. No personal user data is stored in Sanity.
• Stripe — payment processing. Card details are handled entirely by Stripe and are never stored on our servers. Stripe is PCI DSS Level 1 certified.
• Google Analytics — anonymised website analytics. IP addresses are anonymised. You can opt out via our cookie consent banner or Google’s opt-out browser add-on.
• Microsoft Clarity — anonymised session replays and heatmaps, loaded only after you consent to analytics cookies. Data is processed in accordance with Microsoft's privacy statement.
• Resend — transactional email delivery for booking confirmations and notifications.

6. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), secure authentication, and access controls limiting who can view personal data.

7. Clinical Confidentiality

Therapy sessions are confidential. Clinical notes and session records are managed separately from website data and are subject to the ethical standards of the therapist’s professional body (e.g. BACP, UKCP, BPC). Clinical records are held in our secure client portal, not on this website. How the portal handles your information is set out in the portal's privacy notice.

8. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data where there is no compelling reason for continued processing.
• Restriction — request that we limit how we use your data.
• Portability — receive your data in a structured, commonly used format.
• Objection — object to processing of your personal data in certain circumstances.

To exercise any of these rights, contact us at hello@hqtherapy.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact form submissions are retained for 12 months. Newsletter subscriber data is retained until you unsubscribe. Booking and payment records are retained for 7 years in accordance with UK financial record-keeping requirements.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us at hello@hqtherapy.com or write to HQ Therapy Rooms LTD, 322C Kingsland Rd, London E8 4DE.