Privacy Notice – atala Therapies and Training

Effective Date: 06.03.2026

atala Therapies and Training takes your privacy seriously and is committed to handling your personal data in a way that is fair, transparent, and worthy of your trust. We value the confidence you place in us when you share your information, whether you are accessing therapy services or attending training. We take all reasonable steps to protect your data from misuse, keep it secure, and continually review our processes to ensure best practice.

This Privacy Notice explains how we collect, use, store, and protect your personal data, and outlines your rights in relation to that data.

Scope of this Privacy Notice

This Privacy Notice applies to personal data collected when you submit an enquiry through the atala website, email atala Therapies and Training, engage via official social media platforms, book or attend therapy services, or register for and attend training, workshops, or consultancy services.

For the purposes of this policy, “personal data” means any information that can identify you directly or indirectly.

Who we are

atala Therapies and Training is a sole trader practice providing psychological therapy, consultancy, and professional training services. Services may be delivered online or face-to-face.

The practice supports individuals and families experiencing emotional, psychological, and mental health difficulties, as well as grief and bereavement. In addition to therapeutic services, atala Therapies and Training delivers professional education and training.

As a sole trader, atala Therapies and Training is the data controller for the personal data you share directly with the business.

Personal data we collect

We only collect personal data that you choose to share with us. Depending on the nature of your enquiry, this may include your name and email address so that we can communicate with you, along with any information you provide about your reasons for seeking therapy or training.

For therapy services, this may include relevant personal details such as date of birth, GP details, medical history, information relating to emotional wellbeing, risk information where appropriate, and next of kin details if necessary for safe practice.

For training services, we may collect professional details such as your job title, organisation name, professional background, and learning requirements.

We may also retain records of communication, including emails and messages exchanged, as well as feedback or testimonials that you choose to provide.

If you do not consent to us holding the personal data necessary to provide services, we may be unable to proceed with therapy or training. You may request deletion of your personal data at any time. Where there is no legal or professional obligation requiring retention, your request will be honoured.

How we use your personal data

Your personal data is used only for legitimate and lawful purposes. This includes responding to your enquiry, communicating with you, assessing suitability for therapy, delivering therapeutic services, providing training events, maintaining appropriate business and clinical records, and complying with legal and regulatory obligations.

Your data is not used for general marketing campaigns, automated profiling, or third-party data harvesting. No personal data is purchased from external sources.

Where processing is based on your consent, you may withdraw that consent at any time, subject to any overriding legal or professional responsibilities.

Sharing of your data

Your personal data will not be sold or shared for commercial purposes.

Information may be shared with your GP or another relevant professional where clinically appropriate and usually with your knowledge and agreement. In exceptional circumstances, where there is concern about serious risk to your safety or the safety of others, information may be shared with appropriate authorities in line with legal and ethical obligations.

Personal data may also be disclosed where required by law or regulatory process.

If documents are sent to you via email, reasonable steps are taken to ensure security. However, once an email leaves our server, its security depends on your provider’s systems.

Use of artificial intelligence (AI)

atala Therapies and Training does not share personal or sensitive client data with AI tools.

AI tools may occasionally be used for administrative efficiency, generating general educational materials, or supporting booking systems. Any such use complies with professional ethical standards and UK data protection legislation. Identifiable therapeutic material is not entered into public AI systems.

Cookies, analytics and website data

The website may use cookies, log files, or similar technologies to collect anonymous information about browsing behaviour. This helps improve website functionality and user experience. This data does not directly identify you and can be managed through your browser settings.

Children and young people

This Privacy Notice applies to children, young people, and adults. Where therapy is provided to a child or young person, consent and confidentiality arrangements will be clearly explained at the outset in line with professional guidance.

International transfers

Personal data is not intentionally transferred or processed outside the United Kingdom. Where digital service providers are used, reasonable steps are taken to ensure appropriate safeguards are in place.

Data security

Appropriate technical and organisational measures are in place to safeguard your data against unauthorised access, loss, misuse, or disclosure. Secure digital systems are used for record keeping, and any paper records are stored securely.

atala Therapies and Training is registered with the Information Commissioner’s Office and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data retention

Personal data is retained only for as long as necessary to fulfil the purposes outlined in this notice and in accordance with legal, ethical, and professional record-keeping requirements. Different types of data may be retained for different periods depending on the service provided.

Your rights

Under UK data protection law, you have the right to access the personal data held about you, request correction of inaccurate or incomplete data, request erasure of your data where appropriate, restrict or object to certain types of processing, and request data portability where applicable.

If you wish to exercise any of these rights, or have questions about how your data is handled, you may contact: Email: jodie@atala.org.uk

If you are not satisfied with how your data is handled, you have the right to lodge a complaint with the Information Commissioner’s Office.

Other websites

This website may contain links to external websites. atala Therapies and Training is not responsible for the privacy practices of third-party sites.

Changes to this privacy notice

This Privacy Notice may be updated from time to time. Any changes will be posted on this page, and the effective date will be updated accordingly.