GDPR & Privacy As an SME with fewer than 250 employees, under Article 30 of the European General Data Protection Regulation, The Mind Clinic is not bound by the regulation, however, The Mind Clinic chose to operate within the terms of the European General Data Protection Regulation as a matter of Best Practice from May 25 2018. Privacy Notice The Mind Clinic holds the name, email address, phone number and appointment history of data subjects who have booked an appointment through our website Appointment page. The data is given voluntarily by the data subject when booking an appointment and by booking an appointment the data subject is giving consent to use of that data by The Mind Clinic. The data is held for the purposes of contact in regard to the appointment, future appointments and electronic distribution of a quarterly Newsletter. The Mind Clinic’s data processing is not likely to result in a risk to the rights and freedoms of data subjects and the processing does not include special categories of data as defined in GDPR Article 9. The data held is accessible by The Mind Clinic, our Practitioners and Operations Manager only. We do not share data with any other parties. The data is held for up to 36 months after the termination of the contract with the data subjects employer or until the data subject withdraws their consent. If you are a data subject and you wish to withdraw your consent please email info@themindclinic.org. If you are a data subject and wish to complete a Subject Access Request please email info@themindclinic.org. If you are a data subject and wish to submit an objection request please email info@themindclinic.org. The Mind Clinic’s Data Protection Officer is Natasha Malby contactable at natashamalby@themindclinic.org The Mind Clinic is registered with the Information Commissioner’s Office Registration Reference ZA335236. Breaches in data security will be reported within 72 hours to the Information Commissioner’s Office in the UK. We utilise storage and processing services from the following US based subcontractors (click on the name on the list to review the Privacy Policy for each company): Google Inc Timely MailChimp (The Rocket Science Group, LLC) SurveyMonkey