At Mind based therapy, I (Nupur Agarwal) maintain highest standards of trust and confidentiality for all clients/patients that I interact with and adhere to highest professional standards and code of ethics.

Honouring the latest legal guidelines that come into force from 25th of May 2018 under the General Data Protection Regulation, kindly find the Privacy policy for your attention and safeguarding below.

At Mind Based Therapy, I (Nupur Agarwal) comply with all obligations under the General Data Protection Regulation (GDPR) by keeping personal data up to date; by storing (and destroying it) securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

Information that I collect

• Information that you provide by filling in the contact form online: name, email address, message.
• Information that you provide by filling in the intake form:
Name and contact details
personal details such as date of birth and occupation
information about your reason for seeing me, benefits you want to gain, important
events in your life that may be a trigger to the symptom, sources of stress, familiarity
with meditation etc.
• Any relevant medical information you think I need to know.
• If you contact me by email, records of the correspondence may be kept
• Note that I write during our sessions and after each session, which help me to plan and do the session. I will always inform you about this prior to commencing our sessions.

In line with these guidelines, you accept that when you contact me and / or provide me with information, you permit me to hold and use this information.

Storing of your personal data

• Personal data that I collect from you are stored inside a locker if in paper form, on the email system or temporarily on my computer which is password protected.
• I keep the information you give me for a minimum period of five years after your treatment (for adults), and for seven years after a minor reaches the age of majority (18), which is the length of time suggested by my professional body and required by my insurance company for client records.

How your data is used

Collecting your data allows me to plan and do therapy with you. It also helps me to update you on important matters and send you offers that I think may be relevant for you. I will or may use your data:

• To deliver the services that you have requested
• To contact you as necessary in accordance with the services you have requested
• To contact you via surveys to ascertain your opinion on the service you received from me
• To schedule follow ups with you regarding your condition/issue.
• To maintain my accounts and records.

Client confidentiality means that your individual data will never be passed on to a third party without your expressed consent. This includes, not divulging information about you having treatment to a third party without your consent.
In line with the code of ethics set out by my professional body, I may share and discuss anonymous case studies for the purpose of continued professional development, supervision or training. Please note that anonymous means ensuring the removal of any personal details and information that might identify you.

I am duty bound to breach this aspect of confidentiality if there is a legal requirement for me to do so, such as where the Children’s Act applies or a court order is issued, or if I have good reason to believe that significant harm to you or another person may arise should I not disclose that information.

I will not share your personal information with or sell it to third-party marketers.

Your rights and your Personal data

Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:

• Right of access: The right to request a copy of your personal data which I hold about you by requesting it in writing. If you do this, it will be provided within 30 days and free of charge.
• Rectification: The right to request that I correct any personal data if it is found to be inaccurate or out of date
• Portability: The right to request that I share your data with someone else
• Erasure: The right to request your personal data is erased where it is no longer necessary for me to retain such data
• Restricting processing: The right to withdraw your consent to the processing at any time
• Objection: The right to object to the processing of personal data, (where applicable) (e.g. if it is used to send you direct marketing and you don’t want to receive this) and can ask me to stop using it in the way
• Information:you have the the right to understand how I collect and process your information (therefore this privacy notice)

You can learn more about these rights on

Cookies and what they mean
A cookie is a small file stored on your computer or device, which enables my website to identify your computer or device as you view our website pages. Cookies allow websites to store your preferences and track how websites are used. Cookies do not provide us with access to your computer. You can use your web browser’s settings to refuse cookies if you wish.

Website Visitor Tracking Information

When you visit this website, a third-party service called Google Analytics collects standard internet log information and details of visitor behaviour patterns. I do this to identify things such as the number of visitors to my site and which pages are looked at. This information is only processed in a way which does not reveal your identity. I do not allow Google to make any attempt to find out the identities of those visiting my website.

Links to external websites
This website may contain links to other websites. I have no control of external websites and not responsible for the content of other websites, or for the protection or privacy of data you submit to them.

Please note the link to my Accrediting body and its Code of Conduct which is strictly adhered by me can be found here: