Privacy Notice

This notice explains how we collect and use personal data through this website — when you make an enquiry, book a Wellbeing Review, or complete the Wellbeing Maturity Assessment.

Last updated 18 August 2026

1. Who we are

MySafeWellbeing is operated by MySafeTherapy Ltd, a company registered in England and Wales under company number 16357386, with its registered office at 128 City Road, London EC1V 2NX.

We are the data controller for the personal data described in this notice. We are registered with the Information Commissioner's Office under registration number ZB909398.

For any question about this notice or your data, contact contact@mysafetherapy.com.

2. What we collect

Information you give us

• Contact and enquiry details — your name, work email address, organisation name, job role where you provide it, and anything you write in a message or booking request.
• Wellbeing Maturity Assessment responses — your answers to the twelve assessment questions, the resulting score, maturity band and condition breakdown.

Information collected automatically

• Basic technical data — your IP address and browser type are processed by our hosting provider so that pages load and the site stays secure. This is ordinary web server activity rather than tracking.

We do not run analytics, advertising or social media tracking on this website, and we set no cookies beyond those strictly necessary to deliver it. Our Cookie Policy lists them.

3. Why we use it, and our lawful basis

What we do	Lawful basis
Respond to your enquiry or booking request	Legitimate interests — responding to someone who has contacted us. Steps taken at your request before entering a contract, where relevant.
Generate and show your assessment report	Legitimate interests — providing the service you asked for.
Follow up about our services, and send occasional workplace wellbeing insights to business contacts	Legitimate interests in marketing to corporate contacts. You can opt out at any time, in any message, and we will stop.
Keep the website secure and working	Legitimate interests — protecting our systems.
Meet legal, tax and regulatory obligations	Compliance with a legal obligation.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we have concluded they are not. You can ask us for that assessment.

If we introduce analytics or advertising cookies in future, we will ask for your consent before any are set, and update this notice at the same time.

4. Who we share it with

We do not sell personal data, and we do not share it for anyone else's marketing.

We use a small number of service providers who process data on our behalf under contract:

• Webflow — website hosting and storage of form submissions.
• Microsoft — Outlook, for sending and receiving email.

We do not currently use a customer relationship management or email marketing platform. Contact details you give us are held in our Webflow form submissions and our Outlook mailbox, and nowhere else. If that changes, we will update this notice.

We may also disclose data where we are required to by law, or to professional advisers acting under a duty of confidentiality.

5. International transfers

Some of our providers store data outside the UK, including in the United States. Where that happens we rely on the UK's adequacy regulations, the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or another lawful safeguard. You can ask us which applies to a particular provider.

6. How long we keep it

Data	Retention
Enquiries and booking requests that do not become a client relationship	24 months from last contact
Maturity Assessment submissions	24 months from submission
Marketing contact details	Until you opt out, then on a suppression list so we do not contact you again
Records we must keep for legal or tax reasons	As required by law, normally six years

7. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• ask us to delete data, in certain circumstances;
• ask us to restrict how we use it, in certain circumstances;
• receive data you gave us in a portable format;
• object to processing based on legitimate interests;
• object to direct marketing at any time — this one is absolute, and we will always comply;
• withdraw consent where we rely on it, without affecting anything done beforehand.

To exercise any of these, email contact@mysafetherapy.com. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would prefer the chance to put things right first.

8. Security

We use technical and organisational measures appropriate to the data we hold, including encryption in transit, access controls, and limiting access to those who need it. No system is completely secure, but we take this seriously and review it.

9. Children

This website is intended for adults acting in a professional capacity. We do not knowingly collect personal data from anyone under 18 through this site.

10. Changes to this notice

We update this notice when our practices change. The date at the top shows the current version. Where changes are significant, we will make that clear on this page.