1. Who We Are

This privacy policy explains how Dr Alexandra Barnett ('I', 'me', 'my') collects, uses and protects your personal data when you use this website (www.dralexandrabarnett.co.uk) or engage with my services.

I am the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact: www.dralexandrabarnett.co.uk/contact

2. What Data I Collect

When you use the contact form or enquiry form:

Your name and email address
Your phone number (if provided)
The content of your message
Which service you are enquiring about

When you sign up for the free guide:

Your first name
Your email address

When you book an appointment via Tidycal:

Your name and email address
Appointment date and time preferences
Any information you provide during the booking process

When you visit the website:

Basic analytics data (pages visited, time spent on site) via Wix analytics
This data is aggregated and anonymised — I cannot identify you from it

3. How I Use Your Data

I use your personal data for the following purposes:

To respond to your enquiries and provide the services you have requested
To send you the free Brain Reset Guide you have requested
To send follow-up emails related to the guide or services (you can unsubscribe at any time)
To manage appointments and therapy sessions
To comply with my professional and legal obligations as a Chartered Psychologist

The legal basis for processing your data is:

Legitimate interests — responding to your enquiries
Consent — sending marketing emails and the free guide sequence
Contract — where you have engaged me for therapy or other services

4. How Long I Keep Your Data

Enquiry data: up to 2 years if no therapeutic relationship is established
Client records: 7 years from the end of therapy (in line with professional guidelines)
Email list: until you unsubscribe
Booking data: as required by Tidycal's own retention policy

5. Who I Share Your Data With

I do not sell your personal data to third parties. I may share data with the following trusted providers who help me run my services:

Wix.com — website hosting and form submissions
Tidycal — appointment booking
Google Drive — secure document storage

All third-party providers are required to process data securely and in accordance with UK GDPR.

6. Your Rights

Under UK GDPR, you have the right to:

Access the personal data I hold about you
Request correction of inaccurate data
Request deletion of your data ('right to be forgotten')
Object to or restrict processing of your data
Withdraw consent at any time (where consent is the legal basis)
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact me via the contact form on my website.

7. Cookies

This website is hosted on Wix and uses cookies for essential website functionality and analytics. By continuing to use this website, you consent to the use of cookies in accordance with Wix's cookie policy.

8. Data Security

I take the security of your personal data seriously. All data is stored securely and access is restricted to me alone. I use SSL encryption on my website and secure, password-protected systems for storing client information.

9. Confidentiality in Therapy

All information shared within a therapeutic relationship is held in the strictest confidence. There are narrow exceptions required by law — specifically where there is a risk of serious harm to you or others, or where disclosure is required by a court of law. I will always discuss these exceptions with you at the outset of therapy.

10. Changes to This Policy

I may update this privacy policy from time to time. The most current version will always be available on my website. The date at the top of this document indicates when it was last updated.

11. Contact

If you have any questions about this privacy policy or how I handle your data, please contact me at: www.dralexandrabarnett.co.uk/contact