Privacy Policy

Who we are

EMDRConnect("we", "us", "our") operates an online directory that helps members of the public find EMDR therapists in the UK. This policy explains how we handle personal data and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

Data controller: Mental Healthier
Contact for data matters: our contact page

If you are not satisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

The personal data we hold

We process two distinct categories of personal data:

Practitioner information (listed therapists)

Our directory lists EMDR therapists. For each we may hold: name, professional qualifications, professional registrations/memberships, practice address, city/area, contact telephone, service delivery (in-person/online), and a professional description.

Source of this data: practitioner listings are manually compiled from publicly available professional registers and directories, where practitioners have chosen to make their professional details publicly available as part of holding themselves out to offer services to the public. We may also hold a non-public contact email address for the directory functions described below.

Enquirer information (people who contact therapists via the site)

When you use a contact form to enquire with a therapist, we process the name, email address, and message content you provide, in order to pass your enquiry to the relevant practitioner.

We do not ask for or intend to collect special-category (sensitive) data through our forms. Please do not include health information or other sensitive personal details in enquiry messages beyond what is necessary to make contact.

Why we process it, and our lawful basis

Practitioner listings (lawful basis: legitimate interests). We publish professional details of practitioners to help the public find appropriate therapy services. We rely on the legitimate interests of both the public (finding practitioners) and practitioners (being discoverable). We consider this proportionate because the information is limited to professional details already made public by practitioners for the purpose of offering their services, and does not include private or sensitive personal information. Practitioners can object, request correction, or request removal at any time (see sections 7 and 8).

Enquiry forms (lawful basis: legitimate interests / performance of a service). We process enquiry details to deliver the message you have chosen to send to a practitioner. We act as a conduit: we pass your enquiry to the practitioner and do not use your details for marketing.

We use a practitioner's non-public contact email to give required notices about a listing, relay enquiries, verify a claim, and operate a listing after it has been claimed. Claimed practitioners can opt out of optional operational notes without affecting their listing. Marketing updates are separate and require opt-in consent.

How we use enquiry data / who sees it

When you submit an enquiry, your message is delivered to the practitioner you selected through our email provider (Resend), using their contact email (which we hold but never display publicly) and with your email address set as the reply address so they can respond to you directly. We do not store the content of your enquiry, your name, or your email address ourselves, and we do not sell your data or use it for our own marketing. We also record that an enquiry was sent to a listing (the listing and the date only, never your message or your details) so practitioners can see how many enquiries their listing receives.

Practitioner updates (newsletter)

If you are a listed practitioner, you can opt in to receive occasional email updates about EMDRConnect. These updates are sent only to practitioners who have opted in. The email address used to send them is held by our email provider, Resend, for the purpose of delivering these updates: we do not store your email address ourselves for this purpose. You can unsubscribe at any time using the link in any update, or from your dashboard. We keep a record of when consent was given or withdrawn.

Live chat

We offer an optional live chat so you can message us (the site operators) directly. It is provided by Crisp, who process the chat messages and basic technical information on our behalf as a processor. Please do not share sensitive personal or health details in the chat. We are not a crisis service: for urgent help, contact Samaritans on 116 123, NHS 111 (option 2 for mental health), or 999 in an emergency.

How long we keep data

Practitioner listings: retained for as long as the practitioner is listed / the directory operates, and updated periodically. Removed on valid request (section 8) or when a practitioner is no longer in practice.

Suppression records: after a listing is removed, we retain a one-way hash of its contact email, its former page address, and its postcode so that a later public-register import does not add the practitioner back by mistake. The original email address and the rest of the listing are deleted.

Enquiry messages: we do not store the content of your enquiry, your name, or your email address in our own database or logs. Your message is delivered to the practitioner through our email provider, Resend, and received in their inbox. Resend retains sent email data for 30 days, and during that period the message is accessible to us through their dashboard before it is deleted; how long the practitioner keeps it afterwards is governed by their own practice. The only enquiry record we keep ourselves is content-free (the listing and the date, never your message or details), and it holds no personal data.

Cookies and analytics

We use Vercel Analytics to understand aggregate site usage (page views, general traffic sources, and selected interactions such as searches, profile views, successful enquiry sends, claims, and checkout starts). We do not send search text, contact details, messages, profile identifiers, claim codes, or payment identifiers. It does not use cookies, does not collect personal data, and does not track you across sites. Because it sets no non-essential cookies, no consent banner is required; this disclosure satisfies our transparency obligations. We may set essential cookies strictly necessary for the site to function.

Your rights

Under UK GDPR you have the right to: access the data we hold about you; have inaccurate data corrected; have data erased in certain circumstances; object to processing based on legitimate interests; restrict processing; and data portability where applicable. To exercise any of these, contact us on our contact page. We will respond within one month.

Practitioners: correcting or removing your listing

If you are a listed practitioner and wish to correct your details, update your entry, or be removed from the directory entirely, contact us on our contact page and we will action reasonable requests promptly. You do not need to give a reason to be removed. We aim to process your request within 5 working days.

Data security

We take reasonable technical and organisational measures to protect personal data. Practitioner contact emails are not displayed publicly and are used only for listing-related notices and operations, claim verification, and relaying enquiries.

Third parties / processors

We use the following service providers who may process data on our behalf:

• Vercel: site hosting.
• Neon: data storage.
• Resend: delivering listing notices, claim and operational emails, relaying enquiries, and (for practitioners who opt in) sending newsletter updates.
• Vercel: usage analytics.
• Cloudinary: image hosting.
• Cloudflare (Turnstile): bot and abuse protection on our forms.
• Crisp: live chat support.

Each processes data under their own terms and appropriate agreements.

Changes to this policy

We may update this policy. The "last updated" date shows the current version.

Contact

Questions about this policy or your data: see our contact page.