Privacy policy

Prism Psychology Ltd is the private practice of Dr Rachel Megahy, Chartered Clinical Psychologist, registered in Scotland (SC707886). I am the data controller for any personal information you give me through this website.

I collect the information you enter into the enquiry form on this site — your name, email address, an optional phone number, and whatever you choose to tell me about your enquiry. If you join the course mailing list, I collect your email address and which courses interest you.

I collect and hold this information as a legitimate interest under UK GDPR: to reply to your enquiry, arrange appointments, and administer any work we agree to do together. I don't use it for anything else.

You'll only be added to the mailing list if you opt in. The list is held by a GDPR-compliant third-party provider. I won't share your details with anyone else, with the exception of individuals or companies contracted to carry out specific tasks on my behalf, who are bound by the same standards. You can unsubscribe at any time.

If you take the readiness check, your answers stay in your browser and are not stored or sent to us. If you ask for the guide, we send your email address, first name if given, and which of three general results you received to our email provider, Kit, so we can send you the guide and three follow-up emails. You can unsubscribe at any time.

Where payment is taken online, your personal details (not your payment information) pass via Stripe, who collect card details securely. Stripe holds a small amount of data temporarily for operational reasons only and does not pass customer data to anyone other than Prism Psychology. Payment information is never stored on Prism Psychology's systems.

This site may link to other websites I think could be helpful. Once you follow those links I have no control over those sites and can't be responsible for any data collected from you while you're on them.

I may use Google Analytics to understand site usage and improve the content. I sometimes use Google Ads; where you complete a contact form via an ad, the information is treated exactly as it would be from the website form, though it is gathered by Google and provided to me alongside statistical data.

Personal information is held using encrypted, password-protected, cloud-based systems. Paper forms or session notes are scanned into your record and then destroyed — no client information is kept on the premises.

Enquiry correspondence is kept only as long as needed to deal with it. Clinical records and the record of our work together are held for six years and then erased.

You have the right to ask what information I hold about you, to have it corrected, and in most circumstances to have it erased. You also have the right to complain to the Information Commissioner's Office.

Everything you write in the course is saved to your account so it's there whenever you sign in, on any device. That includes the exercises, any answers you give before a lesson, notes you make alongside a lesson, and any lines of the course you choose to keep. We also record which lessons you've read and which exercises you've started, so the course can pick up where you left off. All of this is information about your health, and the law gives it extra protection. Only you can see it. Rachel does not read it, it is never used to train AI systems, and it is never shared or sold. You can download or delete any part of it, or all of it, at any time.

We use an email provider to send you course emails. They receive your email address and simple labels — that you've bought the course, finished it, or haven't opened it for a while. They never receive anything you write in the exercises.

If you choose to use the AI reflection tool, the description you submit is sent to Lovable AI and its model provider to suggest a reflection prompt. This may include sensitive health information. We ask for your explicit agreement before sending it; using the tool is entirely optional. Do not include names or other identifying details.

Unlike course exercises and notes, your description and the suggested prompt are not saved to your course account. They are processed by the AI service, whose operational records may include request content. The tool is not therapy, medical advice or an emergency service. You can stop a request or leave the tool at any time.

The course lets you save your own work — your maps, your ladder and your What Holds document — as a PDF. Once a file is on your device it's outside our control, so keep it somewhere you're comfortable with.