Privacy policy

Prism Psychology Ltd is the private practice of Dr Rachel Megahy, Chartered Clinical Psychologist, registered in Scotland (SC707886). I am the data controller for any personal information you give me through this website.

I collect the information you enter into the enquiry form on this site — your name, email address, an optional phone number, and whatever you choose to tell me about your enquiry. If you join the course mailing list, I collect your email address and which courses interest you.

I collect and hold this information as a legitimate interest under UK GDPR: to reply to your enquiry, arrange appointments, and administer any work we agree to do together. I don't use it for anything else.

You'll only be added to the mailing list if you opt in. The list is held by a GDPR-compliant third-party provider. I won't share your details with anyone else, with the exception of individuals or companies contracted to carry out specific tasks on my behalf, who are bound by the same standards. You can unsubscribe at any time.

Where payment is taken online, your personal details (not your payment information) pass via Stripe, who collect card details securely. Stripe holds a small amount of data temporarily for operational reasons only and does not pass customer data to anyone other than Prism Psychology. Payment information is never stored on Prism Psychology's systems.

This site may link to other websites I think could be helpful. Once you follow those links I have no control over those sites and can't be responsible for any data collected from you while you're on them.

I may use Google Analytics to understand site usage and improve the content. I sometimes use Google Ads; where you complete a contact form via an ad, the information is treated exactly as it would be from the website form, though it is gathered by Google and provided to me alongside statistical data.

Personal information is held using encrypted, password-protected, cloud-based systems. Paper forms or session notes are scanned into your record and then destroyed — no client information is kept on the premises.

Enquiry correspondence is kept only as long as needed to deal with it. Clinical records and the record of our work together are held for six years and then erased.

You have the right to ask what information I hold about you, to have it corrected, and in most circumstances to have it erased. You also have the right to complain to the Information Commissioner's Office.

Everything you write in the course is saved to your account so it's there whenever you sign in, on any device. That includes the exercises, any answers you give before a lesson, notes you make alongside a lesson, and any lines of the course you choose to keep. We also record which lessons you've read and which exercises you've started, so the course can pick up where you left off. All of this is information about your health, and the law gives it extra protection. Only you can see it. Rachel does not read it, it is never used to train AI systems, and it is never shared or sold. You can download or delete any part of it, or all of it, at any time.

We use an email provider to send you course emails. They receive your email address and simple labels — that you've bought the course, finished it, or haven't opened it for a while. They never receive anything you write in the exercises.

The course lets you save your own work — your maps, your ladder and your What Holds document — as a PDF. Once a file is on your device it's outside our control, so keep it somewhere you're comfortable with.