Introduction
MM Psychology Ltd is committed to protecting your privacy and handling your personal information responsibly, securely and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable professional and ethical standards.
This Privacy Notice explains how personal information is collected, used, stored and protected when you contact the practice, receive psychological services, or visit this website.
Data Controller
The data controller responsible for your personal information is:
MM Psychology Ltd, Registered in England and Wales
Email: [email protected]
Website: www.monamichels.com
If you have any questions regarding this Privacy Notice or the processing of your personal information, please contact Dr Mona Michels using the details above.
Information Collected
Personal Information
The practice may collect and process personal information including:
Special Category Health Information
As part of providing psychological services, the practice may collect and process special category personal data relating to:
How Information Is Collected
Information may be collected:
When making an initial enquiry through the website, please avoid providing detailed clinical or highly sensitive personal information. Only provide the information reasonably necessary for the practice to respond to your enquiry.
Purposes and Lawful Bases for Processing
The practice processes personal information for the following purposes:
Responding to enquiries
Assessing suitability for services
Providing psychological assessment and therapy
Maintaining clinical records
Managing appointments and communications
Invoicing and accounting
Insurance claims and reports (where applicable)
Safeguarding, risk management and legal compliance
Processing of Special Category Health Data
Health information receives additional protection under UK GDPR.
The practice processes health information under Article 9(2)(h) UK GDPR, which permits processing necessary for the provision of health care and treatment by a health professional who is subject to a duty of confidentiality.
Health information may also be processed where necessary to protect vital interests, comply with legal obligations, fulfil safeguarding responsibilities, or establish, exercise or defend legal claims.
Confidentiality
Information disclosed during psychological treatment is treated as confidential.
However, confidentiality is not absolute. Information may be disclosed without your consent where:
Professional Consultation and Supervision
To maintain high professional standards, aspects of clinical work may be discussed with appropriately qualified professional supervisors, consultants or peer professionals.
Wherever possible, identifying information will be minimised or anonymised.
All supervisors, consultants and professional colleagues involved in such discussions are subject to professional confidentiality obligations.
Sharing Your Information
Personal information will only be shared where appropriate and lawful with:
Data Retention
Records are retained in accordance with professional, legal and insurance requirements.
Typically:
Data Security
Appropriate technical and organisational measures are used to protect personal information, including:
International Transfers
Personal information is primarily processed within the United Kingdom.
Where third-party service providers process information outside the United Kingdom, appropriate safeguards are implemented to ensure personal information remains protected in accordance with UK GDPR requirements.
Your Rights
Subject to applicable legal and professional limitations, you have the right to:
The practice will normally respond to requests within one month, as required by UK GDPR.
Complaints
If you have concerns regarding the handling of your personal information, please contact MM Psychology Ltd in the first instance so that the matter can be investigated and addressed.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Website: https://ico.org.uk
Website Cookies
This website may use cookies and similar technologies to ensure the website functions correctly, maintain security and understand website usage.
Cookies are small text files stored on your device when you visit a website.
You may manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.
Where non-essential cookies are used, they will be managed in accordance with applicable privacy and electronic communications legislation.
Third-Party Websites
This website may contain links to external websites.
The practice is not responsible for the privacy practices, content or security of third-party websites. Visitors should review the privacy notices of any external websites they choose to visit.
Changes to This Privacy Notice
This Privacy Notice may be updated periodically to reflect changes in legal, regulatory, professional or operational requirements.
Any updates will be published on this page together with the revised date.
Contact
For questions regarding this Privacy Notice or the personal information held by the practice, please contact:
MM Psychology
Email: [email protected]
Website: www.monamichels.com
Revised 8th June 2026
MM Psychology Ltd is committed to protecting your privacy and handling your personal information responsibly, securely and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable professional and ethical standards.
This Privacy Notice explains how personal information is collected, used, stored and protected when you contact the practice, receive psychological services, or visit this website.
Data Controller
The data controller responsible for your personal information is:
MM Psychology Ltd, Registered in England and Wales
Email: [email protected]
Website: www.monamichels.com
If you have any questions regarding this Privacy Notice or the processing of your personal information, please contact Dr Mona Michels using the details above.
Information Collected
Personal Information
The practice may collect and process personal information including:
- Name
- Address
- Telephone number
- Email address
- Date of birth
- GP details
- Emergency contact details
- Appointment information
- Correspondence relating to treatment
- Billing and payment information where applicable
Special Category Health Information
As part of providing psychological services, the practice may collect and process special category personal data relating to:
- Mental health
- Psychological wellbeing
- Clinical history
- Assessment information
- Therapy records
- Risk assessments
- Information relevant to diagnosis, formulation and treatment
How Information Is Collected
Information may be collected:
- Through website enquiries
- By email
- By telephone
- During consultations and therapy sessions
- Through referral sources
- From healthcare professionals involved in your care
- From health insurers where relevant
- From individuals acting on your behalf where appropriate
When making an initial enquiry through the website, please avoid providing detailed clinical or highly sensitive personal information. Only provide the information reasonably necessary for the practice to respond to your enquiry.
Purposes and Lawful Bases for Processing
The practice processes personal information for the following purposes:
Responding to enquiries
- Personal data used: Contact details and enquiry information.
- Lawful basis: Legitimate Interests.
Assessing suitability for services
- Personal data used: Contact and clinical information.
- Lawful basis: Legitimate Interests.
Providing psychological assessment and therapy
- Personal data used: Personal and health information.
- Lawful basis: Contract and Legitimate Interests.
Maintaining clinical records
- Personal data used: Personal and health information.
- Lawful basis: Legitimate Interests and Professional Obligations.
Managing appointments and communications
- Personal data used: Contact details.
- Lawful basis: Contract and Legitimate Interests.
Invoicing and accounting
- Personal data used: Contact and payment information.
- Lawful basis: Contract and Legal Obligation.
Insurance claims and reports (where applicable)
- Personal data used: Personal and health information.
- Lawful basis: Contract and Legal Obligation.
Safeguarding, risk management and legal compliance
- Personal data used: Personal and health information.
- Lawful basis: Legal Obligation and Public Interest.
Processing of Special Category Health Data
Health information receives additional protection under UK GDPR.
The practice processes health information under Article 9(2)(h) UK GDPR, which permits processing necessary for the provision of health care and treatment by a health professional who is subject to a duty of confidentiality.
Health information may also be processed where necessary to protect vital interests, comply with legal obligations, fulfil safeguarding responsibilities, or establish, exercise or defend legal claims.
Confidentiality
Information disclosed during psychological treatment is treated as confidential.
However, confidentiality is not absolute. Information may be disclosed without your consent where:
- There is a serious risk of harm to you or another person.
- Safeguarding concerns arise.
- Disclosure is required by law.
- A court order requires disclosure.
- Professional, regulatory or insurance obligations require disclosure.
Professional Consultation and Supervision
To maintain high professional standards, aspects of clinical work may be discussed with appropriately qualified professional supervisors, consultants or peer professionals.
Wherever possible, identifying information will be minimised or anonymised.
All supervisors, consultants and professional colleagues involved in such discussions are subject to professional confidentiality obligations.
Sharing Your Information
Personal information will only be shared where appropriate and lawful with:
- Your GP
- Psychiatrists
- Other healthcare professionals involved in your care
- Health insurance providers (where applicable)
- Professional advisers
- Regulatory bodies
- Courts, law enforcement agencies or public authorities where legally required
Data Retention
Records are retained in accordance with professional, legal and insurance requirements.
Typically:
- Enquiries that do not proceed to treatment are retained for up to 12 months.
- Clinical records are retained for a minimum of 7 years following the end of treatment and may be retained longer where professional guidance, legal obligations or insurance requirements apply.
- Financial and accounting records are retained for at least 7 years.
Data Security
Appropriate technical and organisational measures are used to protect personal information, including:
- Password-protected systems
- Secure storage of records
- Access controls
- Secure backup procedures
- Secure disposal of records
- Use of reputable service providers
International Transfers
Personal information is primarily processed within the United Kingdom.
Where third-party service providers process information outside the United Kingdom, appropriate safeguards are implemented to ensure personal information remains protected in accordance with UK GDPR requirements.
Your Rights
Subject to applicable legal and professional limitations, you have the right to:
- Request access to your personal information.
- Request correction of inaccurate information.
- Request deletion of information where applicable.
- Request restriction of processing.
- Object to certain forms of processing.
- Request transfer of your information where applicable.
- Withdraw consent where consent is relied upon.
The practice will normally respond to requests within one month, as required by UK GDPR.
Complaints
If you have concerns regarding the handling of your personal information, please contact MM Psychology Ltd in the first instance so that the matter can be investigated and addressed.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Website: https://ico.org.uk
Website Cookies
This website may use cookies and similar technologies to ensure the website functions correctly, maintain security and understand website usage.
Cookies are small text files stored on your device when you visit a website.
You may manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.
Where non-essential cookies are used, they will be managed in accordance with applicable privacy and electronic communications legislation.
Third-Party Websites
This website may contain links to external websites.
The practice is not responsible for the privacy practices, content or security of third-party websites. Visitors should review the privacy notices of any external websites they choose to visit.
Changes to This Privacy Notice
This Privacy Notice may be updated periodically to reflect changes in legal, regulatory, professional or operational requirements.
Any updates will be published on this page together with the revised date.
Contact
For questions regarding this Privacy Notice or the personal information held by the practice, please contact:
MM Psychology
Email: [email protected]
Website: www.monamichels.com
Revised 8th June 2026
