Privacy policy.

This policy explains how The Performer Clinic collects, uses, and protects your personal data. It was last updated in May 2026.

Who we are

The Performer Clinic is a specialist psychology practice operated by Dr Julia Grieshofer, Chartered Psychologist, registered as a sole trader with HMRC and operating from London, SW16. For data protection purposes, Dr Julia Grieshofer is the data controller. The practice is registered with the Information Commissioner’s Office (ICO) as required under UK GDPR. Contact: enquiries@performerclinic.co.uk.

What data we collect

Contact information — your name, email address, and telephone number when you submit an enquiry, join the waiting list, or make a booking.

Clinical information — if you become a client, information relevant to your care, including session notes and correspondence. This is special category data under UK GDPR and is handled with the highest level of care.

Payment information — when you purchase a course or service. Payment processing is handled by Stripe; we do not store card details.

Website usage data — anonymised data about how you use this website.

How we use your data

To respond to enquiries and booking requests; to provide clinical services; to deliver courses you have purchased; to send information you have requested; and to comply with our legal and professional obligations as a registered psychologist. We do not use your data for automated decision-making or profiling, and we do not sell your data.

Legal basis for processing

Contract — to fulfil our obligations to you as a client or course participant. Legitimate interests — to respond to enquiries and manage the practice. Legal obligation — to comply with professional registration and clinical governance standards. Explicit consent — for clinical records and special category data, where required.

How long we keep your data

Clinical records are retained for a minimum of seven years from last contact, in line with BPS and ICO guidance. Enquiry and waiting list data is retained for a maximum of two years, or until you ask us to delete it. Course enrolment data is retained for seven years for accounting purposes.

Your rights

Under UK GDPR you may access, correct, or request deletion of your data (subject to our legal obligations as a clinical practice), restrict or object to processing, request portability, and withdraw consent where consent is the legal basis. Contact us at enquiries@performerclinic.co.uk — we respond within one calendar month. You may also complain to the ICO at ico.org.uk or 0303 123 1113.

Sharing your data

We share data only with contractually bound processors: Stripe (payments), Supabase (course platform data), Resend (email), Vercel (hosting). Clinical session data is never shared with third-party processors.

Clinical confidentiality

All clinical work is bound by the ethical and professional standards of the British Psychological Society. What you share in sessions is confidential, with limited exceptions — serious risk to your safety or that of others, or disclosure required by law — explained fully in your therapy contract before work begins.

This policy was last reviewed in May 2026 and will be reviewed annually.