Privacy Policy

Who we are

Centre for Therapy is an online therapy resource that helps people find a therapist and supports therapists in maintaining a professional profile. The site is operated by Centre for Therapy. If you have any questions about this policy, you can contact us at hello@centrefortherapy.com.

What data we collect and why

We collect and process the following personal data:

• Contact form submissions: when you use a therapist's contact form on the site, we collect your name, email address, phone number (optional), and message. This is used solely to deliver your enquiry to the therapist. We log submission metadata (timestamp, hashed sender identifier) for anti-spam and rate-limiting purposes only.
• Therapist profile data: when a therapist creates an account, we store their name, email address, professional profile content (bio, credentials, fees, contact details), and any images they upload. This is used to publish their public profile on the site.
• Account data: therapist accounts are managed via Supabase Auth. We store an email address and a hashed password. We do not store passwords in plain text.
• Analytics: we use Google Analytics 4 (GA4) to understand how the site is used — for example, which pages are visited and how visitors navigate. GA4 uses cookies (see our Cookie Policy). IP addresses are anonymised. We do not use analytics data to identify individual visitors.

Legal basis for processing

Under UK GDPR, we process personal data on the following bases:

• Legitimate interests: operating the site, delivering contact form enquiries, anti-spam protection, and basic analytics.
• Contract: processing therapist account and profile data to provide the service they have signed up for.
• Consent: analytics cookies, where applicable.

Third-party processors

We use the following third-party services to operate the site:

• Supabase — database and authentication. Data is stored in the EU. See Supabase's privacy policy.
• Google Analytics 4 — anonymised usage analytics. See Google's privacy policy.
• Email delivery (Resend / SMTP) — used to forward contact form enquiries to therapists and for transactional emails such as signup confirmations.

How long we keep your data

• Contact form enquiries: metadata is retained for up to 90 days for anti-spam purposes, then deleted. We do not store the message body beyond delivery.
• Therapist accounts and profiles: retained for as long as the account is active. Therapists may request deletion at any time.
• Analytics data: retained by Google Analytics in line with our configured retention period (default 14 months).

Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at hello@centrefortherapy.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the site after changes are posted constitutes acceptance of the updated policy.

Contact

For any privacy-related questions or data requests, please email hello@centrefortherapy.com.