Privacy Policy
Last updated: October 2026
1. Introduction
MGB Psychology is committed to respecting your privacy and protecting your personal information.
This Privacy Policy explains how Dr Melissa Brown, trading as MGB Psychology, collects, uses, stores and protects personal information when you visit this website, contact me, or enquire about psychological therapy or clinical supervision.
For the purposes of applicable data protection legislation, Dr Melissa Brown is the data controller responsible for the personal information described in this policy.
Please read this policy carefully to understand how your information is handled.
2. Information I Collect
Depending on how you interact with MGB Psychology, I may collect the following types of personal information:
Website enquiries
● Your name and contact details.
● Information you choose to include in a contact form or email.
● The nature of your enquiry.
Therapy services
● Contact and relevant personal details.
● Information necessary to assess your needs and provide psychological therapy.
● Relevant health information and clinical records.
● Information relating to appointments, payments and correspondence.
Please avoid including sensitive personal or medical information in the initial website contact form.
3. How I Use Your Information
I may use your personal information to:
● Respond to enquiries and arrange introductory conversations.
● Assess whether my services are appropriate for your needs.
● Provide psychological therapy or clinical supervision.
● Maintain appropriate clinical and professional records.
● Manage appointments, payments and administrative matters.
● Meet applicable legal, regulatory and professional obligations.
● Maintain the security and proper functioning of this website.
I will only use personal information for purposes that are appropriate and lawful.
4. Lawful Basis for Processing
Under UK data protection legislation, I must have a lawful basis for processing personal information.
Depending on the circumstances, this may include:
● Contract: where processing is necessary to take steps at your request before entering into an agreement or to provide an agreed service.
● Legal obligation: where I must process information to comply with a legal requirement.
● Legitimate interests: where processing is necessary for legitimate professional or business interests and those interests do not override your rights.
● Consent: where consent is the appropriate lawful basis for a particular activity.
Where I process health information or other special category personal data, an additional condition under UK data protection law must also apply.
The appropriate lawful bases and special category conditions will depend on the specific processing activity.
5. Confidentiality and Sharing Information
I treat personal information shared with me through therapy, supervision and professional correspondence with care and respect.
I do not sell personal information.
I may share relevant information with service providers who help me operate my practice, such as secure email, website, clinical recordkeeping or payment providers, where necessary and appropriate.
Information may also be disclosed where required by law or where disclosure is justified by applicable professional, safeguarding or safety obligations.
Where information needs to be shared, I aim to limit it to what is necessary and appropriate in the circumstances.
6. How I Store and Protect Your Information
I take appropriate steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Depending on the information and the service involved, this may include appropriate access controls, password protection and the use of suitable digital systems.
Some information may be stored or processed by third-party service providers acting on my behalf. Where applicable, appropriate safeguards will be used to protect personal information.
No method of electronic transmission or storage can be guaranteed to be completely secure.
7. How Long I Keep Your Information
I retain personal information only for as long as necessary for the purpose for which it was collected, taking account of applicable legal, regulatory, professional and insurance requirements.
Different types of information may need to be retained for different periods.
Retention arrangements will be determined in accordance with the nature of the information and the services provided.
8. Your Data Protection Rights
Under applicable data protection legislation, you may have the right to:
● Request access to your personal information.
● Request correction of inaccurate or incomplete information.
● Request erasure of personal information in certain circumstances.
● Request restriction of processing in certain circumstances.
● Object to certain types of processing.
● Request transfer of information in certain circumstances.
● Withdraw consent where processing is based on consent.
These rights are subject to legal conditions and exceptions. For example, professional or legal obligations may mean that some clinical records cannot be deleted simply because a request is made.
To exercise your rights, please contact me using the contact details provided on this website.
9. Cookies and Website Analytics
This website is hosted using Wix. Wix and any additional services configured on the website may use cookies or similar technologies.
These technologies may be necessary for the website to function, support security, remember preferences or provide analytics.
The cookies and technologies used will depend on the website’s actual configuration. Where required, consent will be requested before non-essential cookies are used.
You can manage cookies through the available website controls and your browser settings.
10. Third-Party Services
MGB Psychology may use third-party providers to support website hosting, email communications, appointment administration, clinical recordkeeping and payment processing.
These providers may process personal information on my behalf where necessary to provide their services.
I will take appropriate steps to ensure that personal information is handled in accordance with applicable data protection requirements.
Where personal information is transferred outside the United Kingdom, any required legal safeguards will be considered and implemented.
11. Links to Other Websites
This website may contain links to external websites. I am not responsible for the privacy practices or content of third-party websites.
I recommend reviewing the privacy policies of any external websites you visit.
12. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to my services, website, systems or legal obligations.
The latest version will be published on this website, with the date of the most recent update shown at the beginning of the policy.
13. Contact and Complaints
If you have questions about this Privacy Policy or how your personal information is handled, please contact Dr Melissa Brown through the contact details provided on the MGB Psychology website.
You also have the right to raise a concern with the UK’s Information Commissioner’s Office (ICO), which oversees data protection in the United Kingdom.
Further information is available from the Information Commissioner’s Office.