1. Who I Am
I am Dr Maja Wieladek, a Clinical Psychologist providing remote psychological services across the UK. I am based in Glasgow, Scotland.

I am the data controller responsible for your personal data.

Contact details:
Email: hello@drmajawieladek.com
A correspondence address is available upon request.

2. Scope of This Policy
This policy explains how your data is handled when you:

• Visit this website

• Make an enquiry or book a discovery call

• Engage in services

Further details on clinical data processing will be provided in the therapy agreement before therapy begins.

3. Professional and Regulatory Compliance
I process personal data in accordance with applicable UK data protection law, including the UK GDPR and the Data Protection Act 2018.
I am registered with the Information Commissioner’s Office (ICO).
I am regulated by the Health and Care Professions Council (HCPC) and adhere to professional standards relating to confidentiality, record keeping, and data protection.

4. What Data I Collect

Website use:

• IP address

• Browser type and usage data (via cookies)

Enquiries and free discovery video calls:

• Name

• Email address and/or phone number

• Date of Birth (for the free discovery video calls bookings)

• Brief information about your reason for contacting me

If you become a client:

• Additional personal and health-related information (covered in a separate agreement)

5. How I Collect Your Data

• Website contact or booking forms

• Email or direct communication

• Information shared during a free discovery video call

6. Lawful Basis for Processing

Website and enquiries:

• Legitimate interests (responding to enquiries, managing appointments, and operating a private clinical practice)

If you become a client:

• Contract (provision of services)

• Provision of health care (Article 9(2)(h) UK GDPR), under a duty of confidentiality as a regulated health professional

7. How I Use Your Data

• To respond to enquiries

• To arrange and conduct discovery calls

• To assess suitability for services

• To manage website functionality and improve user experience

8. Discovery Calls
Discovery video calls are brief (typically 15–20 minutes) and are intended to:

• Understand your needs at a high level

• Assess whether I may be suitable to work with you

They do not constitute therapy or clinical assessment.

Data handling:

• Minimal notes may be recorded and stored securely on a GDPR-compliant system

• These notes are not part of a clinical record unless therapy proceeds

• Information is used only to assess suitability and respond to your enquiry

Retention:

• If you do not proceed to therapy, your data will be retained for up to 6 months and then securely deleted

9. Data Sharing
Your data will not be shared with third parties except where necessary, including:

• Service providers supporting website, communication, clinical record keeping, and payment systems

• Legal or regulatory requirements

Examples of such providers may include website hosting platforms, clinical record systems, payment processors, and video consultation platforms. These providers act as data processors and are contractually required to protect your data.

Your data is not sold or used for marketing purposes.

10. Data Storage and Security
Your data is stored securely using:

• Password-protected systems

• Encrypted services where available

• Secure clinical record systems (WriteUpp)

• Restricted access (sole practitioner)

• Data minimisation principles

11. Third-Party Services
This website and practice use third-party providers to support service delivery (e.g. hosting, communication, payments, and video consultations).

Some providers may process data outside the UK. Where this occurs, appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses.

12. Website Analytics and Search Data

I use website analytics tools, including Google Search Console, to understand how this website is found and used. This may include information such as search queries, pages visited, and general technical data (e.g. device type, browser, and approximate location).

This data is used to improve the website's visibility, accessibility, and performance, and to ensure that services can be found by those who may benefit from them.

This processing does not involve therapy-related or sensitive personal data.

The lawful basis for this processing is legitimate interests, specifically to operate and improve a private clinical practice.

Where third-party providers are used, they process data in accordance with their own privacy and security standards, and appropriate safeguards are in place.

13. Data Retention

• Enquiry and discovery call data: up to 6 months if no further contact

• Client data: retained in line with professional and legal requirements (typically several years after the end of therapy; full details are provided in the therapy agreement)

14. Your Rights
You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion (where applicable)

• Restrict or object to processing

• Request data portability

• Withdraw consent where processing is based on consent

• Not be subject to decisions based solely on automated processing

Requests can be made via email.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

15. Cookies
This website uses cookies to ensure functionality and improve user experience. You can manage cookie preferences through your browser settings and via any cookie banner presented on the site.

16. Complaints
If you have concerns about how your data is handled, you can contact me directly.
You also have the right to complain to the Information Commissioner’s Office (ICO).

17. Updates
This policy may be updated periodically. The most recent version will always be available on this website.

Last updated on 2nd April 2026.