PRIVACY POLICY
1. Who we are
Power to Live Foundation ("we", "us") is a registered charity in England and Wales (charity number 1181997). We provide income-based behavioural psychotherapy online across the UK and in person at Longcroft House, 2-8 Victoria Avenue, London EC2M 4NS.
We are the data controller for the personal information described in this notice.
- Email: info@powertolive.uk
- ICO registration number: ZB634013
- Data protection lead: Jenny Carter, Operations Manager, operations@pow2. Who this notice covers
- People who register for an assessment or receive therapy from us
- People who attend our events, workshops or training
- Donors, fundraisers and Gift Aid supporters
- People who buy gift cards or contact us through our website
- Website visitors
Our staff, placement therapists, volunteers and job applicants receive separate privacy information in our Workforce Privacy Notice.
3. What we collect
If you register for therapy
- Name, preferred name, title, sex, date of birth, occupation
- Contact details and emergency contacts
- Income band, so we can apply our sliding scale
- Medical and mental health history, including GP details
- Information you share during assessment and therapy, and your therapist's clinical notes
- Equality monitoring information, which is optional
If you attend events or training
- Name, contact details, booking and payment records
If you donate or fundraise
- Name, contact details, donation history and, for Gift Aid, your home address and Gift Aid declaration
If you sign up to our newsletter
- Name, email address and your contact preferences
When you use our website
- Information collected through cookies. See our cookie settings on the website.
We do not hold your full card or bank details. Payments are handled by our payment providers.
4. Why we use it and our lawful basis
Under UK data protection law we must have a lawful basis for each use. Health information is "special category" data, which needs an additional condition.
- Assessing you and providing therapy: Contract (Article 6(1)(b)). Additional condition: provision of health or social care (Article 9(2)(h), with Data Protection Act 2018, Schedule 1, paragraph 2)
- Keeping clinical records: Legal obligation and legitimate interests (Article 6(1)(c) and (f)). Additional condition: Article 9(2)(h) as above
- Contacting your GP or emergency services if we believe you or someone else is at serious risk: Vital interests or legitimate interests (Article 6(1)(d) or (f)). Additional condition: vital interests (Article 9(2)(c)) or safeguarding (Data Protection Act 2018, Schedule 1, paragraph 18)
- Taking payment and keeping financial records: Contract and legal obligation
- Equality monitoring: Legitimate interests. Additional condition: equality of opportunity monitoring (Data Protection Act 2018, Schedule 1, paragraph 8)
- Clinical supervision of our therapists: Legitimate interests. Additional condition: Article 9(2)(h)
- Service evaluation and outcome measures: Legitimate interests. Additional condition: Article 9(2)(h). Any research use will be anonymised or will ask for your separate consent.
- Processing donations and claiming Gift Aid: Contract and legal obligation
- Sending newsletters and fundraising emails: Consent (Article 6(1)(a))
We do not rely on your consent to provide therapy. This means withdrawing consent to marketing does not affect your care. You can still ask us to stop any use, as set out in section 8.
5. Confidentiality and when we share information
What you tell your therapist is confidential within Power to Live's clinical team. Your therapist discusses their work in clinical supervision so that you receive safe, high-quality care.
We will only share information outside Power to Live:
- with your agreement, for example with your GP or a referrer
- if we believe you or someone else is at serious risk of harm
- if the law or a court requires us to
Where it is safe to do so, we will talk to you first.
6. Who processes data for us
We use trusted providers to run our services. They act on our instructions and must keep your data secure.
- Our client registration system (app.powertolive.uk), hosted on Amazon Web Services in the EU: client registration and records
- Cliniko: appointments, clinical notes, client management and Cliniko Telehealth video sessions
- Google Workspace: email and documents
- Zoom and Google Meet: online therapy sessions
- Wix: our website, event bookings and gift cards
- GoCardless and Stripe: session payments
- Xero: accounting
- Zeffy: donations
- Mailchimp: newsletters
We have set our providers to store your data in the UK or the European Union. The UK recognises the EU as giving adequate protection. If any provider stores data elsewhere, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum to protect it.
We never sell your data.
7. How long we keep it
- Clinical records: 7 years after your last session. This covers the 6-year period in which legal claims can be brought (Limitation Act 1980)
- Financial records: 6 years after the end of the financial year
- Gift Aid declarations: 6 years after the end of the accounting period of the last donation claimed
- Newsletter list: until you unsubscribe
- Enquiries that do not lead to therapy: 12 months after your last contact with us
8. Your rights
You have the right to:
- ask for a copy of your information
- ask us to correct it
- ask us to delete it, where we are not required to keep it
- ask us to restrict or object to how we use it
- ask us to move your information to another provider, where it applies
- withdraw consent at any time, where we rely on consent
Email operations@powertolive.uk to make a request. We will respond within one month.
9. Keeping your data secure
- Access to client records is limited to staff who need it.
- Our accounts use two-factor authentication.
- Staff and therapists follow our data protection and device-use rules.
10. Complaints
Please contact us first at operations@powertolive.uk.
You can also complain to the Information Commissioner's Office:
- Website: ico.org.uk
- Phone: 0303 123 1113
11. Changes to this notice
We review this notice regularly. The date below shows when it was last updated.
Last updated: 22 October 2026