Last updated: 13 October 2026

1. Who we are

AG Psychology Centre is a psychology practice led by Dr Azucena Guzman, Chartered Clinical Psychologist, registered with the Health and Care Professions Council (HCPC) and the British Psychological Society (BPS). We provide therapy, training, supervision and research services, in person and online.

AG Psychology Centre is the data controller for the personal information described in this policy. For any question about this policy or your information, contact us at contact@agpsychologycentre.com.

2. What we collect and why

Information Why we use it Lawful basis (UK GDPR)
Name, email, phone and message (contact form, email, WhatsApp) To reply to your enquiry and arrange an appointment Legitimate interests; steps before entering a contract
Contact details, date of birth, GP details, emergency contact To provide and administer therapy Contract
Health information, including mental health history, assessment results and session notes To provide safe, effective clinical care Contract, with Article 9(2)(h): provision of health care by a registered health professional under a duty of confidentiality
Payment details and invoices To take payment and keep accounts Contract; legal obligation (tax records)
Training and supervision delegates’ details To deliver and certify training Contract
Research participants’ data Only under a separate information sheet and consent form for each study As set out in that study’s ethics approval
Newsletter email address To send updates you have asked for Consent, which you can withdraw at any time
Website usage data To understand how the site is used and improve it Consent, given through the cookie banner

We do not sell your information or use it for automated decision-making.

3. Clinical records and confidentiality

What you share in therapy is confidential. Clinical records are kept securely and accessed only by your clinician. With your agreement, clinicians discuss anonymised case material in professional supervision, as the HCPC and BPS require.

We will share information without your consent only where the law requires or allows it, for example:

  • where there is a serious risk of harm to you or to someone else
  • where there is a concern about the safety of a child or adult at risk
  • where a court orders disclosure, or a legal duty applies

Where it is safe to do so, we will discuss this with you first. We will contact your GP or another professional only with your consent, except in the situations above.

4. Our website, cookies and service providers

Essential cookies keep the site working and remember your cookie choice. Analytics cookies (Google Analytics) are set only if you accept them in the cookie banner. You can change your choice at any time through the cookie settings link.

The contact form sends your message to our email inbox. It is not stored as a clinical record unless you become a client.

We use these providers to run the practice and website. Each acts on our instructions under data processing terms:

Provider Purpose
Clann Digital (GeoCorp Ltd), with Krystal Hosting (UK data centres) Website hosting and maintenance
Google (Analytics, Search Console) Website statistics, with your consent
Mailchimp (Intuit) Newsletter, if you subscribe
Meta (Instagram) Displays our Instagram posts on the site
Email, video-call, payment and practice administration providers Running sessions and the practice, under confidentiality and data processing terms

If you buy a product or course through the site, your order details are processed to fulfil the order and meet our accounting duties.

5. How long we keep information, and how we protect it

Information Retention
Enquiries that do not lead to therapy 12 months
Adult clinical records 7 years after the last contact
Records for clients under 18 Until the client’s 25th birthday, or 7 years after last contact if later
Financial records 6 years after the end of the financial year
Newsletter subscription Until you unsubscribe
Website analytics 14 months

Records are stored on encrypted, password-protected systems, with access limited to the clinician. Some providers (for example Google and Mailchimp) may process data outside the UK. Where they do, transfers are protected by UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

6. Your rights

You have the right to access the information we hold about you; to have inaccurate information corrected; to have information deleted where we are not legally or professionally required to keep it; to restrict or object to how we use it; to receive your information in a portable format; and to withdraw consent at any time where we rely on consent.

To use any of these rights, email contact@agpsychologycentre.com. We will respond within one month and will not charge a fee.

If you are unhappy with how we have handled your information, please contact us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

We may update this policy. The latest version will always be on this page.