Privacy policy.

Ayna Therapies is committed to complying with the terms of the General Data Protection

This is a summary of how Ayna Therapies collects, uses, and protects your personal data. A full privacy notice is available on request.

Who we are

Ayna Therapies is operated by Hasan Kurtarici, BACP-registered counsellor and psychotherapist, and is the data controller for your personal data. We are registered with the ICO (ref: ZB683747). Contact: ayna.therapies@gmail.com

What data we collect

We may collect your name, contact details, and — where you become a client — clinical and health information relevant to your therapy. This is special category data and is handled with the highest level of care.

Why we collect it and our lawful basis

We collect your data to provide therapy services, manage appointments, and meet our professional obligations under the BACP Ethical Framework. Our lawful basis is:

• Legitimate interests and contract performance — for contact data

• Health and social care purposes (Article 9(2)(h), DPA 2018) — for clinical records

How we store your data

Client records and session notes are stored securely within WriteUpp (www.writeupp.com), a GDPR-compliant practice management system. WriteUpp acts as a data processor on our behalf under a Data Processing Agreement. Data is encrypted in transit and at rest.

Confidentiality and sharing

Your information is strictly confidential. We share data only in the following limited circumstances:

• With our clinical supervisor, in anonymised form where possible

• Where there is a serious risk of harm to you or another person

• Where required by law (e.g. safeguarding, court order)

How long we keep your data

In line with BACP guidance, adult client records are retained for a minimum of 7 years after the end of therapy. Records are then securely destroyed.

Clinical will

Ayna Therapies has a clinical will in place. In the event of serious illness or death, a nominated professional executor will contact any active clients to signpost them to alternative support, hold all records securely, and arrange their destruction after the applicable retention period.

Your rights

Under UK GDPR you have the right to access, correct, or request deletion of your data, and to raise concerns about how it is handled. To exercise your rights, contact us at ayna.therapies@gmail.com. We will respond within one calendar month.

 You also have the right to complain to the ICO: www.ico.org.uk  |  0303 123 1113

Cookies

Our website is hosted on Squarespace, which may collect anonymised visitor analytics via cookies. No personally identifiable client data is stored on Squarespace.

Your Right to Complain About How We Handle Your Data

Under the Data (Use and Access) Act 2025, you have the right to raise a data protection complaint directly with us. If you believe Ayna Therapies has handled your personal data in a way that does not comply with the UK GDPR or the Data Protection Act 2018, we want to hear from you.

You don't need to use formal or legal language if you're unhappy with how your personal data has been used, stored, or shared, that's enough. You can get in touch by email at ayna.therapies@gmail.com

Once we receive your complaint, we will:

• Acknowledge it within 30 days

• Investigate it promptly and keep you informed of progress

• Provide you with a clear outcome and our reasoning

If you're not satisfied with our response, or if you'd prefer to go directly to the regulator, you can contact the Information Commissioner's Office (ICO) - the UK's independent data protection authority - at ico.org.uk or by calling 0303 123 1113.

For our full privacy notice, or to raise a data protection concern, please contact us at ayna.therapies@gmail.com