Privacy Policy
Last updated: 15 July 2026
Clear Health Clinic is committed to protecting your privacy and handling your personal information lawfully, fairly and securely.
This Privacy Policy explains what information we collect, why we collect it, how we use it and your rights under UK data-protection law.
Who we are
Clear Health Clinic is the trading name of:
Legal entity: Clearhealthclinic ltd
Registered address: 1 Thames Court, 2 Richfield Avenue, Reading, RG1 8EQ
Email: hello@clearhealthclinic.co.uk
For data-protection purposes, Clearhealthclinic is normally the controller of your personal information.
Where an independent clinician provides your care, that clinician may also be a separate controller of the clinical records they create. We will explain this where applicable.
Information we collect
Depending on how you use our services, we may collect:
Identity and contact information
- Your name
- Date of birth
- Address
- Email address
- Telephone number
- Preferred method of communication
Booking and account information
- Appointment dates and times
- Services booked
- Account and login information
- Booking history
- Cancellation and attendance information
- Communications concerning your appointments
Health and therapy information
To provide safe and appropriate care, we may collect sensitive information concerning:
- Your physical and mental health
- Current symptoms and relevant medical history
- Medication and previous treatment
- Sexual health, sex life or sexual orientation
- Relationship and psychosexual concerns
- Assessment information and clinical notes
- Treatment plans, progress and outcomes
- Risk, consent and safeguarding information
- Information provided by your GP, another clinician or an authorised referrer
Health information, sexual-orientation information and information about a person’s sex life are special-category personal data and receive additional legal protection.
Payment and transaction information
We may collect:
- Payment status
- Amounts paid
- Billing information
- Refund and transaction records
- Limited payment-card information supplied by our payment provider
We do not normally receive or retain your complete payment-card details. Payments are processed by our secure payment provider.
Website and technical information
When you use our website, we may collect:
- IP address
- Browser and device information
- Website activity
- Cookie preferences
- Security and diagnostic information
Further information is available in our Cookie Policy.
Communications
We may retain emails, telephone notes, contact-form submissions, feedback, complaints and other correspondence.
How we obtain your information
We may receive information:
- Directly from you
- Through our website or booking system
- During consultations and therapy sessions
- From a parent, guardian or authorised representative
- From your GP, healthcare professional, insurer or referrer
- From payment, website and technical-service providers
- Where disclosure is required or permitted by law
If someone provides information about you, we may need to verify that they are authorised to do so.
Why we use your information
We use personal information to:
- Respond to enquiries
- Assess whether our service is suitable for you
- Arrange and manage appointments
- Provide psychosexual therapy and other healthcare services
- Maintain accurate clinical records
- Communicate about your care
- Process payments and refunds
- Manage accounts, cancellations and complaints
- Protect patients, clinicians and others from serious harm
- Meet safeguarding, professional, regulatory and legal obligations
- Prevent fraud and protect our systems
- Maintain and improve our website and services
- Send marketing communications where you have agreed to receive them
Our lawful bases
We must have a lawful basis under Article 6 of the UK GDPR whenever we process personal information.
Depending on the purpose, we may rely upon:
- Contract: processing is necessary to arrange or provide a service you have requested.
- Legal obligation: processing is necessary to comply with the law, regulatory requirements or professional duties.
- Legitimate interests: processing is necessary to operate, secure and improve our services, manage complaints or establish and defend legal claims, provided your rights do not override those interests.
- Consent: you have made a clear choice, such as agreeing to receive marketing.
- Vital interests: processing is necessary to protect someone’s life in an emergency.
Sensitive health and psychosexual information
Where we process special-category information, we also require a condition under Article 9 of the UK GDPR.
Depending on the circumstances, we may rely on:
- Processing necessary for health or social care, diagnosis, treatment or management of healthcare, subject to professional confidentiality
- Your explicit consent where appropriate
- Protection of your or another person’s vital interests where consent cannot be given
- Establishment, exercise or defence of legal claims
- Reasons of substantial public interest permitted by law, including certain safeguarding purposes
Providing relevant health information may be necessary for us to assess and deliver care safely. If you do not provide it, we may be unable to offer or continue treatment.
Confidentiality and information sharing
Information discussed during therapy is treated confidentially. We will not routinely share it with family members, employers or other people without your permission.
Confidentiality is not absolute. We may disclose relevant information where:
- You have authorised us to do so
- It is necessary for your care and lawful to share it
- We reasonably believe that you or someone else is at risk of serious harm
- A child or vulnerable adult may be at risk of abuse or neglect
- We are required by law, regulation, court order or a professional obligation
- It is necessary to prevent or detect serious crime
- It is necessary to establish, exercise or defend a legal claim
Where possible and appropriate, we will discuss the disclosure with you first. We will only share information that is relevant and necessary.
Who we may share information with
Where necessary and lawful, recipients may include:
- Clinicians and therapists involved in your care
- Your GP or another healthcare professional
- Clinical supervisors, subject to confidentiality
- Safeguarding authorities or emergency services
- Regulators, courts, insurers and professional advisers
- Appointment-booking and practice-management providers
- Payment processors
- Website hosting, IT, security and email providers
- Accountants and administrative service providers
- Another person you have authorised
Service providers are only permitted to use information according to our instructions and must protect it appropriately. Some clinicians may act as independent controllers rather than processors.
Clinical supervision
Clinicians may discuss cases during professional clinical supervision to maintain safe and effective practice. Wherever practicable, identifying details will be removed or minimised. Supervisors are subject to confidentiality obligations.
International transfers
Some technology providers may process information outside the United Kingdom.
Where this happens, we will ensure an appropriate legal safeguard is used, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses or another legally recognised mechanism.
You may contact us for further information about relevant safeguards.
How long we retain information
We keep information only for as long as reasonably necessary for care, professional accountability, legal obligations and the establishment or defence of claims.
Security
We use appropriate organisational and technical measures designed to protect personal information against loss, unauthorised access, alteration or disclosure.
These may include:
- Access controls and individual user accounts
- Secure systems and encrypted connections
- Confidentiality agreements
- Staff training
- Secure backups
- System monitoring and security updates
- Data minimisation and controlled information sharing
No internet-based system is completely secure. Please avoid submitting unnecessary clinical details through ordinary email or unencrypted contact forms.
Marketing
We will only send electronic marketing where we have a lawful basis to do so. Where we rely on consent, you can withdraw it at any time by:
- Using the unsubscribe link in the message; or
- Contacting us at [insert email address]
Withdrawing marketing consent will not affect clinical or administrative communications needed to provide your care.
We do not sell your personal information.
Automated decision-making
We do not currently use solely automated decision-making that produces legal or similarly significant effects concerning your treatment or eligibility for care.
If this changes, we will provide appropriate information about the process, its effect and your rights.
Your rights
Depending on the circumstances, you may have the right to:
- Be informed about how your information is used
- Request access to your personal information
- Ask us to correct inaccurate or incomplete information
- Request deletion of your information
- Request restriction of processing
- Object to certain processing
- Receive certain information in a portable format
- Withdraw consent where processing relies on consent
- Challenge qualifying automated decisions
These rights are not absolute. For example, we may need to retain clinical records to comply with legal or professional obligations or to establish or defend legal claims.
To exercise your rights, contact [insert privacy email]. We may ask for evidence of identity and will normally respond within one month.
Complaints
Please contact us first if you have concerns about how we use your information:
You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
Links to other websites
Our website may link to third-party websites. We are not responsible for their privacy practices. You should read the privacy notice of any external website you visit.
Changes to this policy
We may update this Privacy Policy to reflect changes to our services, providers or legal obligations. The current version will be published on this page with its latest revision date.