Privacy Policy

Last updated: 16 October 2026

Lumis (Lumistherapy) is a trading name of Lumis Enterprise Ltd, a company registered in Scotland (company number SC888684), run by Dr Marie-Claire Reville, Clinical Psychologist. This privacy notice tells you what to expect us to do with your personal information when you use this website or get in touch with us.

Contact details

Lumis Enterprise Ltd, trading as Lumis, is the data controller for information collected through this website. It is registered with the Information Commissioner’s Office (ICO), registration number ZC154256.

Telephone: 07960 797063
Email: marie-claire.psychology@outlook.com

What information we collect, use and why

We collect or use the following personal information for information updates and for sending you what you ask for (a resource, a waitlist update, or access to the clinician library or supervisee area):

  • Names and contact details (your first name, last name and email address)
  • For the clinician library: your organisation and your role
  • For waitlists and printable resources: which one you told us you are interested in (for example Dear Hedgehog on its own, or the whole Dear Animal series)

We collect or use the following personal information for dealing with queries, complaints or claims:

  • Names and contact details
  • Correspondence (for example, the emails you send us)

We also collect the following special category information for dealing with queries, complaints or claims. This information is subject to additional protection due to its sensitive nature:

  • Health information. We only hold this if you choose to give it to us, for example in an email, or in the optional question in the therapy feedback survey that asks about your mental health difficulty and how long you have experienced it.

We collect or use the following personal information for feedback and testimonials:

  • Therapy feedback survey: anonymous. It does not ask for your name or email address. You choose how much to write.
  • Supervision feedback survey: anonymous. You may add your current role or stage of training if you wish.
  • Training and talks feedback: not anonymous. It asks for your name, organisation, role and the event you attended, because with your consent your feedback may be used on the website or in print materials, including for marketing.

We collect or use the following personal information to keep this website secure and working:

  • Technical information, such as your IP address, which our hosting provider (Netlify) may record when a page is requested
  • Your IP address, which is shared with Google when a page loads its typefaces from Google Fonts
  • Your cookie choice, and one small browser storage item that keeps a clinician signed in on that device (see Cookies and similar technologies)

If you contact us by email, whatever information you choose to include is used to respond to your enquiry.

If you book therapy, booking and clinical information is handled directly by Circle Psychology Partners, who have their own separate privacy policy. This website itself does not collect or store clinical information.

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights, which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us in writing using the email provided at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information for information updates, for sending you what you ask for, and for feedback and testimonials are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Health information is special category information. We only use it because you have chosen to give it to us, and we rely on your explicit consent to do so.

Our lawful basis for collecting or using personal information to keep this website secure and working is:

  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: keeping this website secure and working properly.

Where we get personal information from

  • Directly from you
  • From Payhip, if you buy a priced resource: the order details we need to deliver it (such as your name)

How long we keep information

  • Resource sign-ups, waitlists and library access: your name, email address and (for the clinician library) organisation and role are kept for as long as we need them for what you asked for, and until you ask us to delete them.
  • Enquiry emails and correspondence: kept only as long as needed to deal with your enquiry and any follow-up, in line with our professional record-keeping obligations.
  • Feedback surveys: responses are kept for as long as they remain useful for improving our practice. The therapy and supervision surveys are anonymous, so we cannot identify a response to remove it. If you give your name in the training and talks survey, we will remove your feedback from any use if you ask us to.
  • Records of sales: kept for as long as the law requires for company accounts and tax.
  • Website technical data and payment details: held by Netlify and Payhip for the periods set out in their own policies (see below).

For more information on how long we store your personal information, or the criteria we use to determine this, please contact us using the details above.

Who we share information with

Service providers

Form submissions on this site are received and stored by Netlify, our website hosting provider. Netlify acts as a data processor on our behalf, under its own data protection terms, not as an independent third party who uses your data for its own purposes. You can read Netlify’s privacy statement and its data protection information.

If you purchase a priced resource from the clinician library, you’re taken to Payhip to complete your purchase and download. Payhip processes your payment details and email address to handle the transaction, issue a receipt, and grant you access to the resource, under Payhip’s own privacy policy and payment security standards, since payment processing happens independently of this website rather than on our behalf. This website itself never receives or stores your payment details.

If you book therapy, Circle Psychology Partners handles your booking and clinical information as a separate organisation, under its own privacy policy.

We do not sell your data to anyone, and we do not share it with any third party for their own marketing or commercial purposes. Using a hosting provider and a payment processor to run a small practice website is different from that, but we think it’s worth naming each one plainly rather than leaving you to assume no one but us ever sees your information.

Others we share personal information with

  • Emergency and safeguarding services: this may require a non-consensual breach of confidentiality; however, wherever possible, we aim to inform you of this if it is safe to do so.

Transfers outside the UK

Some of the providers we use, such as Netlify, are based in or may process information in the United States. Where information leaves the UK, we rely on the safeguards that UK data protection law requires, which our providers describe in their own data protection terms (linked above).

Duty of confidentiality

We are subject to a common law duty of confidentiality. However, there are circumstances where we will share relevant health and care information. These are where:

  • you’ve provided us with your consent (we have taken it as implied to provide you with care, or you have given it explicitly for other uses);
  • we have a legal requirement (including court orders) to collect, share or use the data;
  • on a case-by-case basis, the public interest to collect, share and use the data, overrides the public interest served by protecting the duty of confidentiality (for example sharing information with the police to support the detection or prevention of serious crime);
  • if we are working with you in England or Wales – the requirements of The Health Service (Control of Patient Information) Regulations 2002 are satisfied; or
  • if we are working with you in Scotland – we have the authority to share provided by the Chief Medical Officer for Scotland, the Chief Executive of NHS Scotland, the Public Benefit and Privacy Panel for Health and Social Care or other similar governance and scrutiny process.

Please do ask us for specific information about this in sessions, and we can discuss how common topics are managed.

National data opt-out

At this point in time, Lumis does not provide any NHS-funded or NHS-commissioned care, so we are not engaging with England’s national data opt-out. If this changes, we will update this notice. To find out more or to register your choice to opt out, please visit www.nhs.uk/your-nhs-data-matters.

Cookies and similar technologies

This site does not use cookie-based analytics or advertising. It sets one small, strictly necessary browser storage item so clinicians who unlock the clinical toolkit stay logged in on that device – this isn’t a tracking cookie and doesn’t leave your browser. Your cookie choices are also remembered in your browser, so you aren’t asked every time.

The About page embeds a small number of Instagram and LinkedIn posts, and the Therapy page shows a Google map of the therapy room’s location. These are only loaded if you say yes to “Embedded content” in the cookie banner, since Instagram, LinkedIn and Google set their own third-party cookies once their content is shown. You can change this choice at any time using the “cookie preferences” link in the footer of any page.

Some pages load their typefaces from Google Fonts. This does not set cookies, but it does mean your browser contacts Google’s servers, and your IP address is shared with Google, when the page loads.

How to complain

If you have any concerns about our use of your personal information, you can make a data protection complaint to us:

Email: marie-claire.psychology@outlook.com

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the Information Commissioner’s Office (ICO).

The ICO’s address:
ICO Head Office
4th Floor, No.3 Circle Square
5 Hawkshaw Street
Manchester
M1 7BL

Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint