Privacy Terms


Data Controller

Helen Sproat is the data controller responsible for your personal data.

If you have any questions about this policy or how your data is handled, email contact@helensproat.com


Payment Terms

I collect personal information that you provide directly via this website, including:

  • Name

  • Email address

  • Telephone number (if provided)

  • Information submitted via contact forms

  • Appointment details

  • Payment information processed via Stripe


Purpose and Legal Basis

Personal data is processed for the following purposes:

  • To respond to enquiries

  • To provide psychotherapy services

  • To manage appointments and communication

  • To process payments

  • To send newsletters (where consent has been given)

The legal basis for processing under the EU General Data Protection Regulation (GDPR) includes:

  • Your consent

  • The performance of a contract (therapy services)

  • Compliance with legal and professional obligations


Bookings & Payments

When you pay through this website, your name, email address and appointment details are processed via Squarespace Scheduling (Acuity).

If you make payment online, payment details are processed and securely stored by Stripe, a third-party payment provider. I do not store full card details on my own systems. Where a payment method is saved, I am able to charge the card via Stripe in accordance with our agreed payment terms.

These providers process personal data in accordance with their own privacy policies and applicable data protection laws.


Data Storage & Security

Personal data is stored securely using encrypted systems and trusted third-party providers. Appropriate technical and organisational measures are taken to protect data from unauthorised access, loss or misuse.


Data Retention

I retain only the personal data necessary for the provision of psychotherapy services and for legal, accounting, or professional obligations. I do not maintain detailed clinical records beyond what is necessary for safe and ethical practice.

Newsletter subscribers may unsubscribe at any time via the link in emails.


Rights

Under the EU General Data Protection Regulation, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure where applicable

  • Restrict or object to processing

  • Withdraw consent at any time (where processing is based on consent)

  • Lodge a complaint with the Portuguese Data Protection Authority (CNPD). In the UK, this is the Information Commissioner’s Office (ICO).

Requests regarding your data can be made via contact@helensproat.com.


Cookies

This website may use essential cookies necessary for its functionality. You can manage cookie preferences through your browser settings.


Governing Laws

This privacy policy is governed by the laws of Portugal and applicable European Union and United Kingdom data protection legislation.