Privacy Policy

Last updated: September 2026

This Privacy Policy explains how personal information is collected, used, stored and shared when you visit the Mind-Reframed website, make an enquiry, or access services provided by Mind-Reframed Limited or DBT in Mind Limited.

“Personal information” means information relating to an identified or identifiable individual.

1. Who We Are and Who Is Responsible for Your Information

“Mind-Reframed” is a brand name used in connection with services provided by two separate companies:

Mind-Reframed Limited
Registered in England and Wales
Company registration number: 09882433

DBT in Mind Limited
Registered in England and Wales
Company registration number: 11081301

The two companies are separate legal entities and act as independent data controllers for personal information they collect and process in connection with their respective services.

Mind-Reframed Limited is also the data controller for personal information collected directly through this website, including information submitted through website enquiry forms.

Independent and Associate Therapists

Where individual therapy is provided by an independent or associate therapist under a separate therapeutic agreement, that therapist is independently responsible for the therapy records and clinical notes they create and maintain.

Individual therapists act as separate data controllers in relation to those records and are responsible for complying with their own legal, professional and ethical obligations concerning personal information.

Mind-Reframed Limited and DBT in Mind Limited may nevertheless hold information relating to your enquiry, referral, participation in a programme, attendance, payments, communications, safeguarding or other matters where this is necessary to administer or provide their respective services.

DBT in Mind Limited may also process information relating to a participant’s mental health where this is necessary to assess, administer and safely provide its DBT or MBT programmes.

2. Information We May Collect

Depending on your relationship with us and the services you use, we may collect and process information including:

  • your name, date of birth and contact details;

  • address and emergency contact details;

  • details of your GP, therapist, psychiatrist or other relevant professionals;

  • information contained in enquiries, referrals and communications with us;

  • information concerning the service or programme you are interested in or participating in;

  • attendance and programme participation information;

  • payment, invoicing and insurance information;

  • information relevant to safeguarding, risk or the safe provision of our services;

  • health and mental health information where this is relevant and necessary;

  • information you provide when completing forms or contacting us;

  • technical information relating to your use of our website; and

  • your marketing and cookie preferences.

3. How We Obtain Your Information

We usually obtain personal information directly from you when you:

  • contact us;

  • submit an enquiry or registration form;

  • book or participate in one of our services;

  • communicate with members of our team; or

  • use our website.

We may also receive information from another person or organisation where appropriate, for example from a referring clinician, therapist, psychiatrist, GP, family member, insurer or another professional involved in your care.

Where we obtain personal information from another source, we will handle it in accordance with applicable data protection law.

4. How We Use Your Information

We may use personal information to:

  • respond to enquiries;

  • assess and process referrals;

  • determine suitability for services or programmes;

  • arrange and administer services;

  • manage DBT and MBT programme participation;

  • communicate with participants and relevant professionals;

  • maintain attendance and administrative records;

  • issue invoices and process or reconcile payments;

  • communicate with insurers where applicable;

  • manage safeguarding, risk and emergency situations;

  • respond to concerns or complaints;

  • comply with professional, insurance, regulatory and legal requirements;

  • maintain the security and operation of our website and systems;

  • improve our services and understand use of our website; and

  • send information about relevant services or events where permitted by law and, where required, with your consent.

We will only use personal information for purposes that are compatible with the reason it was collected, unless we have a lawful basis to use it for another purpose.

5. Our Lawful Bases for Processing

Depending on the purpose for which personal information is processed, Mind-Reframed Limited and DBT in Mind Limited may rely on one or more of the following lawful bases under the UK GDPR:

  • Contract – where processing is necessary to provide a service you have requested or to take steps before entering into a contract with you.
  • Legitimate interests – where processing is necessary for the effective administration and operation of our services, responding to enquiries, maintaining appropriate records or protecting our legal interests, provided that these interests are not overridden by your rights and interests.
  • Legal obligation – where processing is necessary for us to comply with a legal requirement.
  • Vital interests – where processing is necessary to protect someone’s life.
  • Consent – where consent is the appropriate lawful basis for a particular activity, such as certain marketing communications.

Health information is handled subject to appropriate confidentiality and professional safeguards.

6. Sharing Personal Information

We do not sell personal information.

We may share personal information where necessary and lawful with appropriate recipients, which may include:

  • therapists and other professionals involved in providing or coordinating services;

  • service providers who process information on our behalf, such as IT, website, email, booking, payment or administrative providers;

  • private health insurers where applicable;

  • professional advisers, insurers or legal representatives;

  • statutory, safeguarding or emergency services where necessary;

  • regulators, courts or other authorities where disclosure is required or permitted by law; and

  • other persons or organisations where you have asked or authorised us to share information.

We will only share information that is reasonably necessary for the relevant purpose and will take appropriate steps to protect personal information when it is shared.

7. Individual Therapy Records

Where individual therapy is provided by an independent or associate therapist under their own therapeutic agreement, the therapist is responsible for the therapy notes and clinical records they create.

Mind-Reframed Limited and DBT in Mind Limited do not hold or manage associate therapists’ therapy notes.

Requests concerning access to, correction of, or other rights relating specifically to an individual therapist’s therapy notes should normally be directed to that therapist.

This does not prevent either company from holding other information about you where it has its own lawful reason for doing so, including administrative, programme, safeguarding, risk, communication or financial information.

8. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, regulatory, professional and insurance requirements.

Administrative and service records will normally be retained for six years after your involvement with our services ends, unless there is a lawful reason requiring or permitting a longer or shorter retention period.

Independent and associate therapists determine their own retention periods for the clinical records for which they are responsible, in accordance with applicable legal, professional and insurance requirements.

When personal information is no longer required, it will be securely deleted, destroyed or anonymised as appropriate.

9. International Transfers

Some of the technology and service providers we use may process or store personal information outside the UK.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with applicable UK data protection law. This may include relying on applicable adequacy regulations or appropriate contractual and other safeguards.

Further information about safeguards applying to a particular transfer can be requested using the contact details below.

10. Data Security

We take appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, destruction, alteration, unauthorised disclosure or access.

These measures may include access controls, password protection, encryption, secure systems and procedures designed to limit access to personal information to those who reasonably require it.

While we take reasonable steps to protect personal information, no method of transmission or storage can be guaranteed to be completely secure.

11. Your Data Protection Rights

Depending on the circumstances and the lawful basis on which your information is processed, you may have the right to:

  • request access to personal information held about you;

  • request correction of inaccurate or incomplete information;

  • request erasure of personal information;

  • request restriction of processing;

  • object to certain processing;

  • request transfer of certain information to you or another organisation; and

  • withdraw consent at any time where processing is based on consent.

These rights are not absolute and do not apply in every circumstance. For example, there may be lawful reasons why information must continue to be retained.

If you wish to exercise a right concerning information held by Mind-Reframed Limited or DBT in Mind Limited, please contact us using the details below.

For individual therapy notes or clinical records held independently by your therapist, please contact the therapist directly.

12. Complaints

If you have concerns about how Mind-Reframed Limited or DBT in Mind Limited has handled your personal information, please contact us so that we can investigate your concerns.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

Information Commissioner’s Office

13. Website Data

The Mind-Reframed website is operated by Mind-Reframed Limited.

When you visit the website, certain technical information may be collected automatically, such as your browser type, device information, operating system, referring page, pages visited and approximate time of access.

This information may be used to:

  • operate and secure the website;

  • diagnose technical problems;

  • understand how the website is used; and

  • improve its functionality and performance.

If you submit an enquiry through the website, Mind-Reframed Limited may pass relevant information to DBT in Mind Limited or an appropriate independent or associate therapist where this is necessary to respond to your enquiry or arrange the service you have requested.

14. Cookies and Analytics

Cookies are small files placed on your device that enable websites to function, remember preferences or collect information about website use.

Our website may use:

  • strictly necessary cookies, which are required for the website to function and do not require consent;

  • functionality cookies, which support website features or remember preferences; and

  • analytics cookies, which help us understand how visitors use the website.

Non-essential cookies, including analytics cookies, will only be used where permitted by applicable law and, where required, after you have provided consent.

When you first visit the website, you can use our cookie controls to accept or reject non-essential cookies. Where available, you can subsequently change your preferences using the website’s cookie controls.

15. Google Analytics

Where enabled with your consent, we may use Google Analytics to help us understand how visitors interact with the website.

Google Analytics may collect information about website usage, devices and interactions. The precise cookies and processing involved may change as the service and our website configuration are updated.

You can refuse analytics cookies through our website’s cookie controls.

16. Marketing Communications

We may occasionally contact you about services, programmes, workshops or events that we believe may be relevant to you where permitted by law.

You can unsubscribe from marketing communications at any time by using the unsubscribe option provided or contacting us.

17. Contact Us

For questions about this Privacy Policy, exercising your data protection rights, or concerns about information processed by Mind-Reframed Limited or DBT in Mind Limited, please contact:

Email: contact@mind-reframed.com
Telephone: +44 (0)7891 901607

If your request concerns therapy notes or clinical records held independently by your individual therapist, please contact that therapist directly.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, systems, providers or legal obligations.

The date at the top of this page indicates when the policy was last updated.