MindPath Consulting

Privacy Policy

PLEASE READ THIS POLICY CAREFULLY. IF YOU DO NOT ACCEPT THESE TERMS, YOU ARE ADVISED NOT TO USE THE WEBSITE OR APP 

Effective Date: July 1, 2025

Hi there. We know privacy policies aren’t the most exciting read—but this one matters. If you’re using our website, getting in touch with us, or engaging with our services in any way, this policy outlines how your data is handled.

If you don’t agree with what you see here, please don’t use our website, forms, booking systems, or any of our services. Otherwise, welcome—we’re glad you’re here.

We keep this policy updated regularly to stay aligned with GDPR and other applicable data protection laws. It’s our way of making sure your personal information is treated with the care and respect it deserves.

We also have a Confidentiality Policy, which will be shared with you during your first session.

 

1. Acceptance

By using our website, booking a session, signing up for our events, or even sending us a message, you’re accepting this privacy policy. Whether you call, email, or DM us—this policy applies.

 

2. Our Stance

We understand the trust you place in us when you share your information. We commit to being transparent, respectful, and secure with your data. We don’t sell it. We don’t misuse it. We use only what’s necessary to provide you with meaningful support.

 

3. About Us

MindPath Consulting offers integrated personal consultancy—combining therapy and coaching—to individuals, couples, and organisations. We’re based in Nigeria and registered with [insert company registration number if applicable].

If you have any questions about your data, please contact our Data Protection Lead at hello@mindpathconsulting.com.

 

4. What We Collect

Depending on how you engage with us, we may collect:

  • Identity data – Name, age, DOB, preferred pronouns.
  • Contact info – Email, phone number, mailing address.
  • Financial data – Payment details when booking sessions or services.
  • Session data – Booking history, services accessed, consultant notes.
  • Tech data – IP address, browser/device info for website visits.
  • Location data – If shared, for matching with appropriate services.
  • Marketing preferences – What you’d like to hear from us (or not).
  • Special category data – Medical, psychological, or identity-related information required for therapy.

 

5. How We Collect It

We gather your information when you:

  • Book sessions through our forms or scheduling platforms.
  • Send us an email, call, or message us online.
  • Subscribe to our newsletter or blog.
  • Apply to work with us.
  • Attend our workshops, events, or retreats.

We use secure third-party systems like [Calendly, Stripe, Notion, Google Workspace, etc.] for operations. Each has its own privacy policy and complies with data protection standards.

 

6. Sensitive Info

When engaging in therapy or consultancy, we may collect personal or sensitive data, such as:

  • Mental health history
  • Current medications
  • Emergency contacts
  • Cultural, identity, or relationship context

We only collect what’s necessary to support your wellbeing and provide you with safe, effective care. Access to this information is restricted to your consultant and relevant admin professionals, and is stored securely.

 

7. Why We Use Your Data

We use your data to:

  • Book and manage sessions
  • Process payments
  • Maintain your client records
  • Provide relevant services
  • Send you updates (only if you opt in)
  • Respond to emergencies if needed

No spam. No fluff. Just what’s essential to support your wellbeing.

 

8. Sharing Your Data

We never sell your data. We only share it when:

  • Required by law (e.g. duty of care, safeguarding concerns)
  • Referring to external professionals with your consent
  • Working with trusted platforms (booking, scheduling, payments)
  • Required for business operations like audits or transitions

All third-party providers follow strict confidentiality and security protocols.

 

9. Data Security

We take your data protection seriously. We use secure systems, encrypted platforms, and limited-access storage to protect your data. While no method is 100% secure online, we do everything reasonably possible to safeguard your information.

 

10. Your Rights

You have the right to:

  • Access – Ask what data we hold about you
  • Rectification – Correct inaccurate or outdated information
  • Erasure – Request deletion of your data (within legal/clinical limits)
  • Restriction – Limit how we process your data
  • Portability – Receive your data in a usable format
  • Objection – Say no to certain uses of your data

To exercise any of these rights, email us at hello@mindpathconsulting.com.

 

11. Complaints

If you’re unhappy with how we’ve handled your data, please contact us first—we want to make it right. If you’re still concerned, you can report it to your local data authority. In the UK, that’s the Information Commissioner’s Office (ICO).

 

In Summary

We take your privacy seriously—because your trust means everything to us. If you ever have questions about how your data is handled, we’re here to talk.

Last reviewed: July 1, 2025

Contact: hello@mindpathconsulting.com

MindPath Consulting © 2025. All rights reserved.

Data Protection and Records Management Policy

Values Statement

At MindPath Consulting, we believe in openness, integrity, and responsibility—values that extend to how we gather, store, manage, and protect your personal information.

This policy outlines:

  • Our responsibilities in managing personal data
  • How we meet our legal and ethical obligations
  • Our expectations for staff, consultants, and partners
  • The actions to be taken in the event of any data breach or misconduct

This policy upholds our core values:

  • We keep clients at the heart of what we do
  • We say what needs to be said
  • We take responsibility

 

1. Policy Purpose

This policy details MindPath Consulting’s commitment to protecting the data of our clients, employees, suppliers, and stakeholders. We ensure all personal data is managed legally, ethically, and transparently—respecting the privacy and rights of every individual.

 

2. Scope

This policy applies to:

  • MindPath Consulting employees, therapists, contractors, and administrative staff
  • Job applicants, clients, suppliers, partners, sponsors, and collaborators
  • Anyone acting on behalf of the company who may have access to personal data

 

3. Data We Collect

We collect a range of data necessary for the delivery of our services, which may include:

Personal Information

  • Name, title, age, date of birth, pronouns
  • Email address, phone number, home or billing address
  • Social media handle (if interacting online)

Sensitive or Special Category Data

  • Health history, medications, therapy records
  • Ethnicity, gender identity, relationship status (if disclosed)

Technical Data

  • IP address, browser type, cookies, device usage

Service-Related Data

  • Session history, payment records, preferences, assessments

 

4. How We Collect Data

Data is collected through:

  • Online forms, booking systems, and client intake forms
  • Emails, phone calls, and virtual consultations
  • Social media interaction
  • Application processes for jobs or partnership
  • Attendance at events or therapy sessions

Third-party systems we use (e.g., Calendly, Stripe, Notion) have their own secure privacy practices, which we review for compliance.

 

5. Why We Use Your Data

We only process personal data when legally permitted, including:

  • To deliver therapy and consultancy services
  • To manage appointments and customer communication
  • To process transactions or refunds
  • To meet legal or regulatory obligations
  • To carry out internal assessments and improve service delivery
  • With your explicit consent, for specific services or communications

 

6. Your Rights Under GDPR & NDPR

You have the right to:

  • Access – Request the data we hold about you
  • Correction – Ask us to update inaccurate data
  • Erasure – Ask us to delete your data (unless required by law)
  • Restriction – Limit how your data is used
  • Portability – Transfer your data elsewhere
  • Objection – Refuse certain data uses
  • Withdraw consent at any time, where consent is the legal basis for data usage

To exercise any of these rights, email privacy@mindpathconsulting.com.

 

7. How We Store & Protect Data

  • Data is stored securely in password-protected, encrypted systems
  • Access is role-based and restricted to trained team members
  • Paper records (if any) are stored in locked, secure cabinets
  • Regular backups and audits are conducted
  • We maintain enhanced vetting (DBS/NDPR checks) for all staff

 

8. Retention & Disposal of Data

  • Client data is kept only for as long as necessary (max 10 years unless required by law)
  • Digital records are securely deleted after the retention period
  • Physical records are shredded and securely destroyed
  • We routinely review stored data for relevance and accuracy

 

9. Data Sharing

We do not sell or distribute data. We may only share data:

  • With your consent
  • With health professionals or emergency contacts (in cases of safeguarding or clinical risk)
  • To fulfil legal obligations (e.g., regulatory bodies or law enforcement)
  • With vetted service providers who help deliver our services under strict agreements

 

10. Breach Notification & Response

If a data breach occurs:

  • A full internal investigation will take place
  • Affected parties will be informed within 72 hours where required
  • The breach will be reported to the appropriate data authority (NDPC/ICO)
  • Disciplinary action may be taken where necessary

 

11. Responsibilities

For Staff & Consultants:

  • Adhere strictly to data privacy procedures
  • Only access data relevant to your role
  • Complete data protection training regularly

For Clients:

  • Provide accurate, up-to-date information
  • Inform us of any changes to your personal details

 

12. Disciplinary Action

Any breach of this policy—intentional or negligent—will result in disciplinary action, which may include contract termination or legal proceedings.

 

13. Related Policies

  • MindPath Consulting Privacy Policy
  • Confidentiality Agreement (reviewed during client onboarding)
  • Information Security Guidelines

 

Contact

For any questions, data requests, or complaints, contact:

Data Protection Lead

hello@mindpathconsulting.com

 

Review

This policy is reviewed annually or when regulations change.

Last Reviewed: July 2025

© 2025 MindPath Consulting. All rights reserved.

Code of Conduct Policy

1. Accreditation and Professional Status

All MindPath Consulting therapists and personal consultants are fully qualified and accredited by recognized professional bodies, including:

  • British Association of Dramatherapists (BADth)
  • United Kingdom Council for Psychotherapy (UKCP)
  • British Association for Counselling and Psychotherapy (BACP)
  • Health & Care Professions Council (HCPC)

Each practitioner brings extensive experience working across age groups, identities, ethnicities, and professional backgrounds. All consultants meet high ethical, legal, and professional standards.

 

2. Eligibility and Accessibility of Services

MindPath Consulting provides preventative, proactive, and integrated mental wellness services for adults (18+), with a focus on therapy, coaching, and consultancy. Our services are best suited for those seeking emotional clarity, personal growth, or professional development—not emergency or crisis intervention.

We are not a crisis service.

Clients experiencing acute distress or suicidal thoughts should seek immediate help through:

If our services are not suitable, we will make every effort to guide clients to appropriate alternatives.

 

3. Confidentiality

Confidentiality is a cornerstone of the therapeutic relationship. All MindPath Consulting practitioners are committed to the strictest standards of client confidentiality, as outlined by their respective regulatory bodies.

Exceptions to Confidentiality

In rare, exceptional cases, confidentiality may be broken—without prior consent—when:

  • There is an imminent risk of harm to self or others
  • There is a legal obligation to disclose (e.g., child safeguarding, terrorism, court order)
  • There are safeguarding or public protection concerns

Whenever possible, we will seek client consent before disclosure and explain the reasons clearly.

 

4. Code of Ethics

MindPath Consulting is committed to fostering a safe, inclusive, and respectful environment. We will:

  • Gain informed consent before offering services
  • Respect diversity, dignity, and identity
  • Challenge discrimination and unconscious bias
  • Maintain appropriate therapeutic boundaries
  • Communicate transparently and listen attentively
  • Provide clear, accurate information about services
  • Collaborate professionally with colleagues and partners
  • Practice only within areas of expertise
  • Pursue ongoing professional development
  • Keep up-to-date with legal and regulatory requirements
  • Adhere strictly to GDPR and data protection principles
  • Maintain non-judgmental, compassionate professionalism
  • Act honestly and with integrity at all times

All MindPath Consulting therapists also agree to abide by the HCPC Standards of Proficiency or the relevant ethical codes of their accreditation body.

 

5. Data Protection & Client Records

All therapists must:

  • Store session notes securely and separately from identifying personal data
  • Keep written or digital records in password-protected and encrypted platforms
  • Limit access only to those with a professional need to know
  • Adhere to GDPR and MindPath’s Data Protection & Records Management Policy
  • Use the MindBody app responsibly and maintain client confidentiality at all times

Records are held only for as long as legally and clinically necessary and are securely destroyed thereafter.

 

6. Supervision and Legal Compliance

All MindPath Consulting therapists:

  • Engage in regular clinical supervision to maintain ethical and reflective practice
  • Remain compliant with their accreditation body’s ongoing registration requirements
  • Participate in our internal induction and ongoing training programmes

Supervision is a non-negotiable requirement to ensure client safety and therapist support.

 

7. Attitude, Flexibility & Professionalism

MindPath Consulting is a progressive, collaborative workplace. We expect all practitioners to:

  • Uphold the ethos of inclusivity, respect, and openness
  • Be flexible, especially during periods of change or growth
  • Represent the company positively, whether in-session or in professional networks
  • Take shared responsibility for a supportive, evolving team culture

A generous, growth-oriented attitude is essential to maintaining our shared mission.

 

8. Feedback, Complaints & Compliments

Client feedback is essential to our learning and service improvement.

We welcome:

  • Informal feedback or suggestions directly to your therapist or via hello@mindpathconsulting.com
  • Formal complaints or compliments through our Client Feedback & Complaints Policy (available upon request)

Complaints will be handled sensitively, fairly, and promptly. We aim to resolve concerns through open dialogue and accountability.

 

9. Enforcement & Compliance

Breaches of this Code—by staff, consultants, or affiliates—may result in:

  • Formal investigation
  • Disciplinary action
  • Termination of contract
  • Legal reporting, where required

We are committed to holding ourselves accountable to the highest professional standards, for the wellbeing of our clients and the integrity of our services.

Contact: hello@mindpathconsulting.com

+447 079 0484 7705​

Speak with a compassionate professional anytime—confidential support is just a free, 24/7 phone call away, every day of the year.

hello@mindpathconsulting.com

Prefer to write? Reach out via email anytime. Our team responds with care, understanding, and timely guidance.

London & Bedfordshire

Visit us in a calming, confidential space designed for connection, reflection, and support—your path to healing starts here.