Website Terms, Privacy & Therapeutic Agreement

1. Website Disclaimer & Professional Boundaries

Information, Not Advice: The content on Wisdom Therapy & Coaching is for educational purposes only and does not substitute for personal therapy or medical advice. Accessing this content does not establish a therapist/coach-client relationship.

Crisis Communication: This website and my email are not monitored 24/7. In an emergency, do not wait for a reply. Please contact NHS 111, the Samaritans at 116 123, or attend your nearest A&E.

Social Media Policy: I maintain a strict separation between my private life and clinical practice. I do not accept "friend" requests from current or past clients on personal platforms. You are welcome to follow my professional Wisdom Therapy pages; however, please be aware that engaging (liking/commenting) may identify you as a client to the public. I do not use Direct Messaging (DMs) for clinical or administrative purposes.

2. GDPR Privacy Policy

I am Zsófia Káplár, an NCPS Accredited Registrant (No. 4313) and ICO registered (ZA466762). I am committed to protecting your privacy under UK GDPR and NCPS ethical guidelines.

Information Collected: I collect contact details, health history, intake forms, and minimal clinical notes necessary for safe treatment at the beginning of therapy by a separate process, this is for transparency only.

AI Transparency: I do not use AI-tools to write my clinical notes, or record sessions. To operate professionally , I need to use some third-party providers, that use AI tools but are secure and GDPR-compliant.

Third-Party Services: I use secure, GDPR-compliant professional industry-standard providers including Kiku and Google Calendar (Practice Management), Starling, PayPal and Stripe (Payments), Zoom PRO (video conferencing), Gmail, and ProtonMail (Encrypted Email) and HMRC tax and accountancy services, as needed.

Data Retention: Notes are kept for 7 years after your last session, in accordance with insurance requirements, then securely destroyed. You have the right to access your data via zsofiakaplar@protonmail.com.

3. Therapeutic Agreement & Logistics

Secure Video Sessions: We meet via Zoom. To ensure maximum confidentiality, I use unique, password-protected meeting links for every client and a secure Virtual Waiting Room. I will admit you to the session at our scheduled time.

Jurisdiction: All services are provided under UK jurisdiction.

Fees & Payments: All private session payments are processed securely through either Stripe or BACS or IBAN transaction via Starling Business. For insurance-funded sessions (eg. Aviva/WPA), you need to provide your authorization code and membership number during booking.

Cancellations: I require 48 hours’ notice to cancel or rearrange. Sessions cancelled with less than 48 hours’ notice, or missed sessions, remain payable at the full fee.

Public Encounters: If we meet in a physical public or online space, I will not initiate contact to protect your anonymity. You are welcome to say hello, but I will follow your lead.

4. Client Consent & Signature

By using this website or booking a session via the portal, you confirm:

I have read and understood the Privacy Policy and Therapeutic Agreement.

I consent to the use of secure, unique Zoom links and understand the 48-hour cancellation policy.

I understand that website communication is not a crisis service.

Last Updated: 8 September 2026 Copyright: © 2026 Zsófia Káplár / Wisdom Therapy. All Rights Reserved. No part of this website's content may be reproduced, distributed, or transmitted in any form, by any means, without the prior written permission of the author.

GDPR Opt-in Policy

Last Updated: 17th June 2026

Disclaimer:

This website does not substitute for any personal therapy or medical advice. It only provides general information for educational purposes. It does not establish a therapist/coach and client relationship or assumes any liability.

GDPR Privacy Policy:

I’m committed to protecting your privacy. I work under UK jurisdiction and adhere to the National Counselling and Psychotherapy Society (NCPS) Ethical Framework, complying with UK GDPR and other relevant data protection laws. This policy explains how I handle your personal information in online therapy. By using my services, you opt in to consent.

Who I Am

Name: Zsofia Kaplar, NCPS accredited registrant therapist

NCPS Membership No.: 4313

Email: zsofiakaplar@protonmail.com

ICO Registration No.: ZA466762

Information I Collect

I collect information necessary to provide safe and effective therapy:

Directly from you: Contact details, initial enquiry info, intake information, sensitive therapeutic data (e.g., health, personal history), emergency contact, GP details, and payment information.

Automatically (website use): Standard, anonymised browsing data (e.g., IP address, pages visited) for website improvement, via tools like Google Analytics.

How I Use Your Information

I use your data for:

Providing therapy: Based on our contract and legitimate interests. For sensitive health data, I rely on "provision of health or social care" and/or your explicit consent.

Managing sessions: Scheduling, communication, and maintaining minimal clinical records.

Professional supervision: Anonymous case discussion with my supervisor, as required by NCPS.

Legal/ethical duties: Compliance with tax, safeguarding, and NCPS guidelines.

Emergency protocols: Managing serious risk of harm, potentially involving emergency services or trusted contacts, with prior discussion where possible.

Service improvement: Analysing anonymised website data.

Confidentiality & Sharing

Your sessions are confidential. I do not share your personal information without your explicit consent, except when:

There’s a serious risk of harm to you or others (I’ll try to discuss this with you first).
Legally required by a UK court.
For anonymous professional supervision.
Using secure, GDPR-compliant third-party services for video calls (e.g., Zoom Pro) booking, email, payments, and accounting. I have data processing agreements with these providers.

Data Security

I use secure systems (password protection, encryption) to protect your data. Electronic records are stored securely, often on servers within GDPR-compliant regions. While I strive for maximum security, no online transmission is 100% risk-free.

Data Retention

Therapeutic notes and contact details: Retained for 7 years after your last session, in line with professional and insurance guidelines.

Initial enquiry data: Deleted within 6 months if therapy doesn’t proceed.

Your Rights

Under GDPR, you have the right to:

Access your data (response within one calendar month; a charge may apply)

Correct inaccurate information

Request deletion (Right to be Forgotten), unless legal/ethical reasons require retention.

Contact & Complaints Procedure

If you have any concerns or complaints about how I handle your personal data, you have the statutory right to raise a formal data protection complaint directly with me.

Please submit your complaint in writing to zsofiakaplar@protonmail.com
I will acknowledge receipt of your complaint within 30 days.
I will investigate the matter and provide a full outcome response without undue delay, keeping you informed of my progress, if the investigation requies extended enquiries.

If you remain dissatisfied with the outcome of my internal investigation, you have the right to escalate your complaint to the UK’s Information Commissioner’s Office (ICO):
www.ico.org.uk
Clients outside the UK may contact their local data protection authority.

Policy Changes

I may update this policy. The "Last Updated" date below reflects the latest version.

Last Updated: 8th September 2026

Disclaimer

GDPR Privacy Policy

I am committed to protecting your privacy. I work under UK jurisdiction and adhere to the National Counselling and Psychotherapy Society (NCPS) Ethical Framework, complying with UK GDPR, the Data Protection Act 2018, and other relevant data protection laws. This policy explains how I handle your personal information across both my online therapy services and my promotional/educational communications.

Who I Am

Name: Zsofia Kaplar, NCPS accredited registrant therapist

NCPS Membership No.: 4313

Email: zsofiakaplar@protonmail.com

ICO Registration No.: ZA466762

Separation of Clinical vs. Marketing Consent

To ensure strict compliance with data protection laws, my clinical practice and marketing communications operate on entirely separate, unbundled consent workflows:

Therapy Clients: Agreement to therapy terms, client confidentiality, and clinical data processing is collected separately via a dedicated Clinical Intake & Consent Agreement provided at the start of therapy. Becoming a therapy client does not automatically enroll you in any marketing email lists.

Newsletter & Downloads Subscribers: Opting into marketing emails, downloading free resources or registering for public events is managed independently via standard email opt-in forms. Marketing consent is strictly optional, handled separately from clinical services, and can be withdrawn at any time without impacting your therapy.

Information I Collect

I collect information necessary to provide safe, effective therapy and optional educational content:

Directly from you (Therapy): Contact details, initial enquiry info, intake information, sensitive therapeutic data (e.g., health, personal history), emergency contact, GP details, and payment information.

Directly from you (Marketing & Workshops): First name, email address, and event attendance preferences when you sign up for newsletters, download resources, or register for events/workshops.

Automatically (Website & Emails): Standard, anonymised browsing data via tools like Google Analytics. For email communications, standard performance metrics (such as email opens and link clicks) are recorded via MailerLite to evaluate engagement.

How I Use Your Information & Lawful Bases

Providing Therapy: Based on our contract and legitimate interests. For sensitive health data, I rely on "provision of health or social care" (GDPR Article 9(2)(h)) and explicit consent.

Managing Sessions: Scheduling, communication, and maintaining minimal clinical records.

Newsletters, Downloads & Event Promotion: Based on your explicit, freely given Consent (GDPR Article 6(1)(a)). I use your details to send requested downloads (e.g., via Google Drive), access links for free events (e.g., Zoom or in-person), details on upcoming workshops, and commercial or affiliate recommendations (e.g., TheraSummit.)

Professional Supervision: Anonymous case discussion with my supervisor, as required by NCPS guidelines.

Legal & Ethical Duties: Compliance with tax regulations, safeguarding protocols, and NCPS ethical standards.

Emergency Protocols: Managing serious risk of harm, potentially involving emergency services or trusted contacts (discussed with you beforehand where safe and possible).

Confidentiality & Data Sharing

Your personal information and clinical sessions remain strictly confidential. I do not sell or pass on your details to third parties for independent marketing purposes. Information is only shared under the following conditions:

Risk of Harm: Where there is a serious risk of harm to you or others.

Legal Requirement: Where required by a UK court of law.

Professional Supervision: Anonymous discussions for ethical practice monitoring.

GDPR-Compliant Service Providers: Using secure third-party processors for business operations under strict Data Processing Agreements:

Video Calls: Zoom Pro

Email Marketing & Automations: MailerLite

File Delivery: Google Drive

Link Management: Custom redirect links (PrettyLinks) for promotional and affiliate content

Payments & Accounting: Secure, encrypted banking and payment portals

Data Security

I use password protection, two-factor authentication, and encryption to safeguard your data. Electronic records are stored securely on servers compliant with UK GDPR requirements. While every standard measure is taken to secure your personal data, no online transmission over the internet can be guaranteed as 100% risk-free.

Data Retention

Therapeutic Notes & Clinical Records: Retained for 7 years after your last session, strictly complying with NCPS ethical standards, legal considerations, and professional insurance requirements.

Marketing & Newsletter Data: Stored only for as long as you remain subscribed. If you unsubscribe or request deletion, your email is immediately removed from active marketing communications.

Initial Enquiries (Non-clients): Deleted within 6 months if therapy or working relationship does not proceed.

Your Rights

Under UK GDPR, you have the right to:

Access: Request a copy of the personal data held about you (provided within one calendar month).

Rectification: Request corrections to inaccurate or incomplete information.

Erasure ("Right to be Forgotten"): Request deletion of your data, except where retention is legally or ethically required (e.g., clinical records required for 7 years).

Withdraw Consent: Withdraw consent for marketing at any time without impacting your therapy or access to client services.

Complaints & Escalation Procedure

If you have any concerns or complaints about how your personal data is handled, please submit your complaint in writing to: zsofiakaplar@protonmail.com

I will acknowledge receipt of your complaint. I will investigate the matter fully and provide a comprehensive response within one calendar month.

If you remain dissatisfied with the resolution, you have the right to escalate your complaint to the UK’s supervisory authority:

Information Commissioner’s Office (ICO): www.ico.org.uk

Policy Changes

I may update this policy periodically to reflect changes in legal obligations or service offerings.

This updated Privacy Policy Clause includes:

Explicit separation of Clinical vs. Marketing Consent (new)

Therapy Clients: Agreement to therapy terms, client confidentiality, and clinical data processing is collected separately via a dedicated Clinical Intake & Consent Agreement provided at the start of therapy. Becoming a therapy client does not automatically enroll you in any marketing email lists.

Newsletter & Download Subscribers: Opting into marketing emails, downloading free resources, or attending public events is managed independently via standard email opt-in forms. Marketing consent is strictly optional, handled separately from clinical services, and can be withdrawn at any time without impacting your therapy.

Copyright:

2025 Zsofia Kaplar/Wisdom Therapy. All Rights Reserved. No part of this website's content may be reproduced, distributed, or transmitted in any form, by any means, without the prior written permission of the author.