Privacy Statement
Effective date: 17 June 2026
This privacy statement explains what personal information I collect, why I collect it, what I do with it, and the rights you have over it. It applies to this website and to my work as a psychosexual and relationship therapist and clinical supervisor.
I am committed to protecting your privacy and handling your information carefully, particularly because much of the information involved in therapy is sensitive.
Who I am (the data controller)
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:
Dr Remziye Kunelaki (Dr Remziye Kunelaki Limited company - 14719642- Projects Nile House FAO Numbers Studio, Nile Street, Brighton, East Sussex, England, BN1 1HW).
Email for data protection matters:
I am registered with the Information Commissioner's Office (ICO). My registration reference is A8398597.
If you have any questions about this statement or want to exercise any of your rights, please contact me at the email address above.
The information I collect
Enquiry information. When you contact me through the website form, by email, or by phone, I collect the details you give me — typically your name, email address, phone number, and the content of your message.
Clinical information. If you become a client, I collect information necessary to provide therapy. This includes your contact and identifying details and, by the nature of the work, information about your health, sexual health, sex life, relationships, and wellbeing. Under data protection law, this is "special category" data, which is given extra protection. The way I handle it is set out in the section below.
Referral information. If a doctor or another professional refers you, I may receive relevant information from them, and (with the arrangement explained below) I may send a summary back to them.
Website and analytics information. When you visit the website, limited technical information may be collected — such as IP address, browser type, device and operating system, the pages you view, and how you arrived at and moved through the site. For more information on the cookies used on this website please see my cookie policy here: https://www.psychosexualtherapist.co.uk/cookies
My lawful basis for using your information
Data protection law requires me to have a valid "lawful basis" for using your information. Mine are:
- Handling your enquiry — legitimate interests (UK GDPR Article 6(1)(f)): responding to people who contact me about therapy. Where your enquiry is a step towards arranging therapy, this is also a step taken at your request prior to entering a contract (Article 6(1)(b)).
- Providing therapy or supervision — performance of a contract with you (Article 6(1)(b)).
- For the special category (health and sex-life) information involved in therapy — I rely on Article 9(2)(h): the provision of health and social care and treatment by a professional bound by a duty of confidentiality. I am bound by such a duty through my professional body (COSRT).
- For meeting legal and regulatory obligations — such as keeping financial records (Article 6(1)(c)).
- For using anonymised case material in teaching, training and writing — I rely on your explicit consent (Article 9(2)(a)), which I will ask for and which you can decline or withdraw at any time (see "Teaching, training and case material" below).
I do not rely on consent as the basis for delivering your clinical care, because you should be able to withdraw consent freely without that affecting the treatment and records that responsible care requires.
How I use your information
I use your information to:
- respond to your enquiries and arrange appointments;
- provide therapy or clinical supervision and keep appropriate clinical records;
- correspond with a referring doctor or professional where that has been agreed;
- keep financial and business records and meet my legal and regulatory obligations;
- maintain and improve the website.
How I handle your clinical (special category) information
I take handwritten notes during assessment sessions as a memory aid. I record my notes on Semble, an encrypted electronic clinical records platform. Once notes are recorded on Semble, I securely shred and dispose of the paperwork.
If a doctor has referred you, a summary (discharge letter) is sent to them through an encrypted electronic platform at the end of our work, unless you ask me not to.
You have the right to request a copy of your notes in writing.
If you become unwell during a session, I will call the emergency services and may disclose your name and any medication you have told me about, in order to keep you safe.
[I use an AI- Assisted Claude to write referral letters or summaries to doctors. I do not use any of your sensitive information; that is added manually by me after review, and the letters are deleted after use from the system)
Cookies and similar technologies
This website uses cookies. Cookies that are strictly necessary for the site to function are set automatically. Any non-essential cookies — including analytics cookies — are only set after you have given your consent via the cookie banner on your first visit. You can accept or reject non-essential cookies, and you can change your choice at any time via the settings tab. See https://www.psychosexualtherapist.co.uk/cookies for more information.
Who I share your information with
I do not sell your information or share it for marketing. I share it only where necessary:
- Semble — my encrypted clinical records platform (data processor).
- IONOS — email hosting (data processor).
- Claude AI — summary of assessment and referral letters (data processor).
- A referring doctor or professional — where agreed, as described above.
- A professional executor — in the event of my sudden incapacity or death, a professional executor would take responsibility for my clients, which would involve disclosure of client identities. Executors are bound by the same professional and ethical confidentiality obligations.
- Where required by law — for example in connection with safeguarding concerns or other legal obligations such as those relating to terrorism, money laundering, or serious crime.
Where another organisation processes data on my behalf, I have a written contract requiring them to protect it and to use it only on my instructions.
International transfers
Some of the services used to operate this website, such as website analytics, email delivery or cloud-based systems, may process personal information outside the UK or EEA. Where this occurs, appropriate safeguards are in place to ensure that your information remains protected and handled in accordance with UK data protection law.
How long I keep your information
I keep information only for as long as necessary:
- Clinical records (adults): records are retained for a minimum of 7 years from the date of last contact. This period reflects the limitation period for civil claims, the complaint and conduct timeframes of our professional bodies (COSRT/UKCP), and the requirements of our professional indemnity insurance.
- Enquiries that do not lead to therapy: up to 12 months.
- Financial and business records: 6 years, to meet HMRC requirements.
- Following a client's death: records are reatined for 7 years from the date of death.
Where a complaint, claim, or legal proceeding is anticipated or underway, the relevant records will be reatined until the matter is fully resolved, even if this exceeds the standard period. Where records are kept beyond the standard period for any reason, the reason will be documented and the client informed of the effects.
When information is no longer needed, I delete or securely destroy it.
How I protect your information
Clinical records are held on an encrypted platform (Semble). I use Transport Layer Security (TLS) to protect email in transit; if your email service does not support TLS, emails between us may not be protected, so please bear that in mind when sending sensitive information by email. I scan incoming email and attachments for viruses and malicious software.
Teaching, training and case material
For teaching, training and writing that contributes to the profession, I may sometimes use material from our discussions as case studies. Where I do, all identifying information is disguised to protect your confidentiality. I rely on your explicit consent for this. Please tell me — at our first session or at any time afterwards — if you would prefer I did not use anonymised material from your case, and I will respect that. You can change your mind at any time.
Your rights
Under UK data protection law you have the right to:
- be informed about how I use your information (this statement);
- access the personal information I hold about you;
- rectification — ask me to correct information that is inaccurate or incomplete;
- erasure — ask me to delete your information, although I may need to keep some of it where the law or my professional and insurance obligations require;
- restrict how I use your information in certain circumstances;
- object to certain processing;
- data portability in certain circumstances;
- withdraw consent at any time, where I am relying on your consent.
To exercise any of these rights, please contact me at [
You also have the right to complain to the Information Commissioner's Office if you are unhappy with how I have handled your information. You can contact the ICO at ico.org.uk, by their helpline, or by post — though I would welcome the chance to put things right first.
Links to other websites
This website may contain links to other sites I do not control. This statement does not cover those sites, so please check their privacy policies before providing any personal information.
Changes to this statement
I may update this statement from time to time. The current version, with its effective date, will always be available on this page.
Dr. Remziye Kunelaki
