Privacy & data protection

Website privacy notice.

This notice explains how information is handled when you visit this website or make an initial enquiry. It is separate from the fuller clinical privacy information provided before therapy begins.

Last reviewed: 7 August 2026

Who is responsible for your information

Chryssa Chalkia is the data controller for website enquiries made to this private practice. Questions about this notice or your information can be sent to chryssa.chalkia@gmail.com, or by post to The Linen Hall, 162–168 Regent Street, Soho, London W1B 5TF.

What the enquiry form does

The form does not create an account or store your answers in a website database. It prepares an email draft in your own email application. Nothing is sent until you review the draft and press Send. Once sent, the email is processed by the relevant email providers.

The form asks for your first name, email address and preferred appointment format. It also offers an optional field for a brief overview of what you would like to address in therapy. Detailed clinical history is not required. This reflects the UK GDPR principle of data minimisation.

Information that may be processed

Information may include the contact details and appointment preferences you provide, correspondence about your enquiry, any brief health-related overview you choose to include, and essential technical information used by the website host to deliver and protect the site. Health information is classed as special category data and is given additional protection. Please keep any initial overview brief and wait until an appropriate clinical conversation before sharing detailed sensitive information.

Why information is used

Information is used only to respond to and manage your enquiry, arrange an initial consultation, maintain the security and operation of the website, and meet applicable legal and professional obligations. Personal data is processed only where an appropriate lawful basis applies. Any clinical information later required for therapy is handled under the applicable UK GDPR and Data Protection Act 2018 requirements.

Sharing and retention

Information is not sold. It may be processed by necessary service providers, such as website hosting and email providers, or disclosed where required by law, safeguarding duties or professional obligations. Information is kept only for as long as needed for the purpose for which it was collected and any applicable professional or legal record-keeping requirement.

Teenagers aged 14–17

Teenagers should avoid sending sensitive personal or health information by email. Before therapy begins, confidentiality, consent, safeguarding and any appropriate parental or carer involvement are discussed clearly with the young person.

Cookies and analytics

This website does not intentionally use advertising cookies. Optional analytics will not be activated without an appropriate privacy and consent approach. Essential technical processing by the host may still be required to deliver and protect the site.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict the use of your personal information, and to object to certain processing. Please contact Chryssa Chalkia first if you wish to exercise a right or raise a concern. You may also make a complaint to the Information Commissioner’s Office.

Relevant framework

This practice handles personal information with regard to the UK General Data Protection Regulation guidance and the Data Protection Act 2018.