Privacy Policy
Last updated: 2 October 2026
N Therapy respects your privacy and takes the protection of personal information seriously. This policy explains how we handle information when you visit ntherapy.co.uk or contact us about early intervention support.
Who we are
N Therapy provides private early intervention support for children and families in London.
The person responsible for deciding how your personal information is used, known as the data controller, is Nalin Toprak.
Business: N Therapy
Data controller: Nalin Toprak
Email: nalin@ntherapy.co.uk
Telephone: 07551 937860
Location: London, United Kingdom
You can use these contact details for privacy questions, requests about your information or complaints.
Information we collect
When you contact us through our website, by email or by telephone, we may collect your name, email address, telephone number, your child’s age, preferred callback time and the information you provide about the support you are seeking.
We may keep relevant correspondence and information about how we have responded to your enquiry.
Our website and its hosting and security tools may also collect technical information, including your IP address, browser information, pages requested, access times and security events. Cookie settings may record your preferences.
Please provide only the information needed for your enquiry. Avoid including medical reports, detailed health histories or sensitive information about other people in the website contact form.
How we use your information
We use your information to respond to enquiries, arrange conversations, discuss whether our services may be suitable and take steps you request towards arranging support.
We also use relevant information to operate and protect our website, prevent misuse, handle privacy requests and complaints, and meet applicable legal obligations.
You do not have to make an enquiry or provide optional information. However, without sufficient contact details and basic information about your request, we may be unable to respond or arrange support.
Our lawful bases
We process personal information under the UK General Data Protection Regulation and the Data Protection Act 2018, as amended.
For general enquiries and website security, we rely on our legitimate interests in responding to requests, running our business and protecting information. We consider the impact on individuals, particularly children, before relying on these interests.
Where you ask us to take steps towards entering into a service agreement with you, we may process information necessary for those steps on the basis of contract.
Where processing is required by law, we rely on the relevant legal obligation. Where we rely on consent, we explain the purpose and provide a way to withdraw it.
Children’s and sensitive information
We take particular care with children’s information. A child’s health, disability or diagnosis can be sensitive personal information requiring additional legal protection.
The website enquiry form is intended for initial contact. If more detailed information is needed to consider or provide support, we will explain what is required, how to provide it, the legal grounds for using it and how long it will be retained before collecting it.
Where we rely on explicit consent for sensitive information, we obtain that consent separately. Sending an enquiry or reading this policy does not, by itself, provide explicit consent.
Consent can be withdrawn by contacting us. Withdrawal does not affect processing that was lawful beforehand. If information is necessary for particular support, withdrawing consent may affect our ability to provide that support.
We consider the child’s understanding and rights. Where someone acts on a child’s behalf, we may need to verify their authority.
If you become a client, we will provide any additional privacy information needed for ongoing support and client records.
Who may receive your information
Relevant information may be accessible to providers supporting our website hosting, email, maintenance, security and backups. Access should be limited to what is needed for their role, with appropriate contractual protections where they process information on our behalf.
Our website uses WordPress and Avada for website functionality, Complianz for cookie management, Wordfence for security and UpdraftPlus for backups. Whether information remains on our hosting system or is processed by an external provider depends on the tools and settings used.
Information may also be shared with professional advisers where necessary, or with authorities where disclosure is legally required.
Where necessary and lawful to protect a child or another person from harm, relevant information may be shared with appropriate safeguarding or emergency services. We normally explain such sharing unless doing so could increase risk, prejudice an investigation or conflict with the law.
International processing
Some technology providers may process or access information outside the United Kingdom.
Where this involves a restricted international transfer, an appropriate legal mechanism must be in place, such as UK adequacy regulations or approved contractual safeguards. You can contact us for information about the arrangements relevant to your information and how to obtain details of applicable safeguards.
How long we keep information
We retain information only for as long as it is needed for the purpose for which it was collected.
For enquiries, we consider whether the enquiry has been resolved, whether follow-up is reasonably expected and whether relevant information needs to become part of an agreed client record.
For website and security records, we consider the time needed to maintain the service, identify misuse and investigate incidents. Backup copies are retained according to the applicable backup rotation arrangements.
Information connected with a complaint or legal matter may need to be retained until that matter and any applicable retention requirements have been addressed.
Information that is no longer needed is securely deleted or anonymised. Further retention information for ongoing support is provided when that support is arranged.
Protecting your information
We use appropriate technical and organisational measures to protect personal information and limit access to those who need it.
No website or email service can guarantee complete security. Please avoid sending unnecessary sensitive information through the contact form or ordinary email.
Cookies
Our website uses cookies and similar technologies to support its operation and remember relevant preferences. Complianz helps manage cookie information and choices.
Where consent is legally required, we request it before using the relevant technology. Any consent choices can be changed through the website’s cookie controls.
You can also manage cookies through your browser settings, although blocking some cookies may affect website functions.
Your rights
Depending on the circumstances, you can ask to access your personal information, correct inaccurate information, have information deleted, restrict its use or receive certain information in a portable format.
You can object to processing based on legitimate interests and withdraw consent where we rely on it.
These rights are subject to legal conditions and exceptions. Contact nalin@ntherapy.co.uk to make a request. We may need to confirm your identity or your authority to act for someone else.
We normally respond within one month. If a lawful extension or other adjustment applies, we will explain this. Requests are normally handled without charge.
Complaints
If you are concerned about how we handle personal information, contact Nalin Toprak at nalin@ntherapy.co.uk or on 07551 937860.
We will acknowledge your data protection complaint within 30 days, investigate it without undue delay and explain the outcome.
You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, through its [complaints service](https://ico.org.uk/make-a-complaint/).
Changes to this policy
We may update this policy when our services, information-handling practices or legal requirements change. The latest version will appear on this page with its updated date. We will bring significant changes to your attention where required.