Your clients are quietly judging your privacy policy

There is a moment in the process of choosing a therapist that does not get discussed much. The prospective client has read your website, decided they like the sound of you, and is about to make contact. Before they do, some of them — increasingly, many of them — look for your privacy policy.

What they find shapes what happens next.

Why clients look for it

Therapy involves sharing information that people share with almost nobody else. Trauma histories, relationship difficulties, mental health diagnoses, substance use, things that happened in childhood. Clients understand, often very clearly, that this information is sensitive.

Before trusting a therapist with that information, some clients want to know that the therapist takes data seriously. Not in a legalistic way — they are not reading your lawful basis with particular interest — but in the sense of: does this person understand that what I tell them is precious, and have they made proper arrangements to protect it?

A well-written privacy policy signals: yes, I have thought about this. A missing one signals the opposite.

What clients actually do

Research into therapy-seeking behaviour suggests that a significant proportion of clients now check a therapist's online presence in detail before making contact. This includes reading bios, looking at professional body membership, checking fee information — and, increasingly, looking for compliance documentation.

What happens when they cannot find a privacy policy, or find one that is clearly a generic template?

Some proceed anyway. Many do not. The ones who do not tend to be exactly the clients who have done their research — often the most motivated, most self-aware clients a therapist could hope to attract.

The referral dimension

Word of mouth remains the primary source of new clients for most therapists in private practice. But a growing proportion of clients come via directories — Psychology Today, Counselling Directory, BACP's Find a Therapist — where they are comparing multiple practitioners simultaneously.

In that context, a clear compliance page is a differentiator. It communicates professionalism, attention to detail, and respect for client confidentiality. These are the same qualities that make a good therapist. The alignment is not accidental.

What a good compliance page looks like

A compliance page that builds client confidence includes:

A privacy policy that names your specific tools. If you use Calendly for bookings, Zoom for sessions, or Google Analytics on your website, your privacy policy should say so and explain what data each tool processes. Generic language ("we may use third-party services") does not build confidence.

Your professional body and what it requires. Clients who are informed about therapy want to know you are accountable to a professional body. Your compliance documents should reflect your specific body's requirements — not a generic template.

A clear process for clients who have concerns. The DUAA 2025 requires therapists to have a complaints procedure from June 2026. A well-designed complaints form on your compliance page is not just a legal requirement — it signals that you take client concerns seriously.

Your ICO registration number. If you are registered with the ICO (as most therapists in private practice should be), displaying your registration number signals that you have taken the formal step of registering as a data controller.

The trust gap

There is a gap in UK private practice therapy between the emotional trust that a therapeutic relationship requires and the practical trust that data compliance signals. Most therapists are extraordinarily careful with client confidentiality in practice. Many have not communicated that care through their compliance documentation.

Closing that gap is not just about legal compliance. It is about showing clients — before they have even met you — that you take their trust seriously.