Running a therapy practice already gives you enough to think about. Privacy documents and a proper way to handle data-protection complaints should not sit forever on the “quiet afternoon” list.
New complaints requirements are already in force for UK practices handling personal information. Separately, if you are a BACP member, the updated Ethical Framework becomes mandatory on 3 November 2026. A cookie banner on your website helps with one narrow piece of the picture. It does not, on its own, cover those wider duties.
That is why we built TheraComply: tailored privacy documents for UK therapy practices, a place to publish them, and tools to manage data-protection complaints, without starting from a blank page.
What is already in force
In plain terms, your practice needs to:
- offer a clear way for someone to raise a data-protection complaint
- acknowledge that complaint within 30 days
- investigate it
- communicate the outcome without undue delay
That is current expectation, and the ICO has published guidance on it. Policies may exist. A banner may sit on the site. The missing piece is often the complaints side: a public form, acknowledgements, tracking, and a record of what happened and how it ended.
BACP members: 3 November 2026
If you are a BACP member, the updated Ethical Framework becomes mandatory on 3 November 2026. That does not mean waiting until October. The complaints duties above are already in force more broadly. Getting your documents and process in order sooner means you are not scrambling when the date arrives.
Why a cookie banner alone is not enough
Cookie banners help visitors choose how non-essential cookies and similar tech are used on your website. Useful. Not the whole job.
Your policies also need to reflect your own software, record keeping and sharing arrangements, alongside a working complaints process. A banner manages website cookie choices. It does not describe how you keep client records, explain which tools you use day to day, or give someone a real route if they need to complain about data protection.
So the useful question is not only “Do I have a banner?” It is “Would someone looking at my practice find clear documents that match how I actually work, and a real route for data-protection complaints?”
What TheraComply gives you
TheraComply prepares tailored privacy, cookie and retention policies from your answers, with a place to publish them and manage data-protection complaints.
For £24 a year, including VAT, you get:
- documents tailored to your practice: privacy, cookie and retention policies, a data protection statement and a complaints procedure, plus an Appropriate Policy Document when your answers call for one
- tools to handle complaints: a public form, acknowledgements and case tracking so each complaint and your responses stay together
- your own hosted policy page: publish approved documents, link from your website, download copies, and update as your practice changes
Getting started is straightforward. Follow guided questions about your work, records and software. If you have a website, you can run a check and review the services found. Read the prepared drafts, check they describe your practice, then approve and publish when you are ready. You can save progress and return later. Document setup does not ask for client names or therapy notes.
Prefer us to handle the website bit?
Publishing on TheraComply does not automatically change your own site. You (or your website editor) still add the links and configure the cookie banner.
Want us to handle that? Choose Set it up for me for a £15 one-off (including VAT). Once you publish, we add the policy links and configure and test your cookie banner so visitors’ choices are respected. With setup, you pay £39 today, then £24 a year.
It is not legal advice. It is tailored documents and a practical complaints process, based on your answers, ready for you to check and use.
A calm next step
If privacy paperwork has been waiting for a clear afternoon, this is a practical way to get your practice’s privacy documents sorted.
Or read more on the TheraComply site first. Thanks for looking after your clients, and for keeping the admin side tidy enough that they can trust you.