Legal
Privacy Policy
What personal information Mind Bridge collects, why it is collected, who it is shared with, and how it is kept safe.
Last updated: 28 July 2026
1. Who we are
Mind Bridge is a private online therapy practice run by Rugile Karaliene, based in Milton Keynes, England, United Kingdom. Rugile is the data controller for the personal data described in this policy and is registered with the UK Information Commissioner's Office (ICO) under registration number ZC195961. For anything relating to your data, email info@mindbridge.uk.
2. What information is collected
Contact form: your name, email address, phone number (including country code) and the content of your message. Free consultation: your email address, used to confirm the booking and to prevent duplicate free consultations. Bookings and payments: session or package purchased, amount, currency, payment and charge references from Stripe, and refund or dispute status. Full card details are never seen or stored by Mind Bridge. Scheduling: the name, email and chosen time you provide when booking through Calendly. Therapy records: session notes and any information you choose to share during sessions, which may include health and wellbeing information (special category data). Technical data: IP address, device and browser information, and pages visited, collected through analytics and marketing cookies only after you have accepted them in the cookie banner.
3. How your information is used, and the legal basis
Performance of a contract: arranging and delivering your sessions, taking payment, sending booking confirmations, receipts and refund notifications. Legitimate interests: replying to enquiries you send, preventing duplicate free consultations, keeping the website and booking system secure, and maintaining accurate business records. Consent: analytics and marketing cookies, and any optional communications. You can withdraw consent at any time. Legal obligation: retaining payment and accounting records as required by UK tax law. Health information shared in therapy is handled under Article 9(2)(h) of the UK and EU GDPR, for the provision of health and social care by a professional bound by a duty of confidentiality. Your information is never used for automated decision-making or profiling.
4. Who your information is disclosed to, and how
Limited data is shared with reputable service providers who process it on Mind Bridge's behalf, each under their own contractual and security obligations. All transfers happen over encrypted HTTPS connections through the providers' own systems, never by unsecured email. Stripe: name, email and payment amount, for processing card payments and refunds. Card details are entered directly into Stripe's hosted checkout and never pass through this website. Calendly: name, email and appointment time, for scheduling sessions. Google Meet: your name and joining details, for delivering the session itself. Sessions are not recorded. Supabase / Lovable Cloud: booking records and transactional email delivery (sent from notify.mindbridge.uk). Google Analytics and Meta Pixel: anonymised or pseudonymised usage data, only if you accept analytics and marketing cookies. Your data is never sold, rented, or shared with any third party for their own marketing purposes. Where a provider stores data outside the UK or EEA, transfers are covered by the UK International Data Transfer Addendum or EU standard contractual clauses.
5. Limits to confidentiality
Everything shared in sessions is confidential. Confidentiality may only be broken where required by professional and legal duties: a serious risk of harm to you or another person, safeguarding of a child or vulnerable adult, a court order, or disclosure duties under UK anti-terrorism or anti-money-laundering law. Where it is safe and possible to do so, this would be discussed with you first. Full details are set out in the Terms & Conditions.
6. How your information is kept safe
The entire website is served over HTTPS, so information you submit is encrypted in transit. Booking and payment records are stored in a managed database with encryption at rest and row-level security rules, so records are not publicly readable and cannot be listed by other visitors. No card numbers are stored anywhere in the system. All keys and credentials for payment and email services are held server side only and are never exposed to the browser. Access to client records is limited to Rugile. Session notes are kept securely and separately from marketing systems. In the unlikely event of a personal data breach that poses a risk to you, the ICO will be notified within 72 hours and you will be told directly where required by law.
7. How long information is kept
Session notes and client records: 7 years after your last session, then securely deleted, in line with professional guidance for adult clients. Payment and accounting records: retained for as long as UK tax law requires (currently 6 years after the end of the relevant tax year). Contact form enquiries that do not lead to a booking: deleted within 12 months. Analytics data: retained according to the retention settings of Google Analytics and Meta, and held in pseudonymised form.
8. Your rights
Under UK and EU GDPR you have the right to: access a copy of the personal data held about you; have inaccurate data corrected; request erasure where there is no overriding legal or professional reason to keep it; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, email info@mindbridge.uk. You will receive a response within one month. If you are unhappy with how your data has been handled, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EU (in Lithuania, the State Data Protection Inspectorate, vdai.lrv.lt).
9. Cookies
Essential cookies are needed for the website to work, for example remembering your language and cookie choice. Analytics and marketing cookies (Google Analytics and Meta Pixel) are only set after you accept them in the cookie banner. If you decline, no analytics or marketing cookies are placed. You can change or withdraw your choice at any time using the Cookie settings link in the footer, or by clearing your browser storage for this site.
10. Children
Mind Bridge provides therapy for adults. The website and services are not intended for anyone under 18, and personal data is not knowingly collected from children. If you believe a child has provided personal data, email info@mindbridge.uk and it will be deleted.
11. Changes to this policy
This policy may be updated from time to time as the service or the tools it relies on change. Any significant change will be reflected here, and the date at the top of the page always shows the current version.
12. Contact
Questions about this privacy policy or about your data: info@mindbridge.uk. Mind Bridge, Rugile Karaliene, Milton Keynes, England, United Kingdom. ICO registration ZC195961.