Privacy policy

Last updated: 16 June 2026

Your privacy matters to us. This policy explains how Code Meadow Limited (“we”, “us”, “our”), trading as TheraPages, collects, uses, and protects your personal information. We handle personal data in line with UK data protection law, principally the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

TheraPages is a service provided by Code Meadow Limited, a company registered in England and Wales (company number 16296262). Our website is https://www.therapages.com.

For the personal data we collect about our clients and enquirers, Code Meadow Limited is the data controller. Section 9 explains how this works for the websites we build for therapists.

2. What personal data we collect, and why

We collect personal data in the following ways:

  • When you get in touch. If you contact us through our contact form or by email, we collect your name, email address, and anything else you choose to include, so that we can respond to you.
  • When you become a client. We collect your name, email address, phone number, and billing details so we can provide and manage our website-building service. Payment details are handled securely by our payment provider and are not stored on our own servers.
  • Your account. When you sign up, we create an account for you, which holds your contact details and your subscription and billing status.
  • Content for your website. We process the content used to build your website. This includes material you give us directly, and, with your agreement, professional information you have already made public, such as your existing online directory profiles, which we use to prepare your site. You are responsible for making sure you have the right to share any personal data contained in the content you provide.

We also use privacy-friendly analytics to understand how our website is used. These do not use cookies and do not collect personal information about you. See our Cookie Statement for details.

3. How we use your data

We use your personal data to:

  • provide, operate, and maintain our service;
  • set up and manage your account and subscription;
  • process payments;
  • communicate with you, including answering your enquiries and providing support;
  • improve and secure our service; and
  • meet our legal and accounting obligations.

4. Our legal bases for processing

Under UK GDPR, we rely on the following legal bases:

  • Performance of a contract, to provide the service you have signed up for, including building and maintaining your website and managing your account.
  • Legitimate interests, for example to respond to enquiries, to improve and secure our service, and to understand how our website is used, provided these interests do not override your rights.
  • Legal obligation, for example to keep accounting and tax records.

5. Cookies and analytics

We do not use tracking or advertising cookies on therapages.com, and our analytics are cookie-free and anonymous. Full detail is in our Cookie Statement.

6. Who we share your data with

We do not sell, rent, or trade your personal data. We share it only with trusted providers who help us run our service, and only as far as they need it to do their job. These include:

  • Outseta, for account sign-up, login, and subscription management.
  • Stripe, for processing payments.
  • Amazon Web Services (AWS), for hosting and infrastructure.
  • Umami, for cookie-free, anonymous website analytics.
  • Cloudflare, for content delivery and website security.
  • Email service providers, which we use to send and receive email relating to your enquiry or account.

Each of these acts on our behalf under terms that require them to keep your data secure and to use it only for the purposes we have set.

7. International data transfers

Some of our providers are based outside the United Kingdom, including in the United States. Where your personal data is transferred outside the UK, we make sure it is protected by an appropriate safeguard recognised under UK data protection law, such as the UK extension to the EU-US Data Privacy Framework, or the ICO’s International Data Transfer Agreement. Our website analytics data is processed within the European Union, which the UK recognises as providing an equivalent level of protection.

8. How long we keep your data

We keep your personal data only for as long as we need it:

  • Client and account data is kept for as long as you are a client, and for a reasonable period afterwards.
  • Billing and transaction records are kept for at least six years, to meet UK tax and accounting requirements.
  • Enquiries from people who do not go on to become clients are kept for up to 12 months, then deleted.

9. The websites we build for therapists

This policy covers how we handle your personal data as our client or enquirer.

The websites we build are operated by you, the therapist. If your website collects personal data from its visitors, for example through a contact form, you are the data controller for that information, and we act as your data processor, handling it on your behalf. Where we act as your processor, this is governed by a separate data processing agreement between us. We design the websites we build to use as little storage as possible.

10. How we keep your data secure

We use appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. Payment information is handled by our PCI-compliant payment provider rather than stored by us.

11. Your data protection rights

Under UK GDPR, you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data;
  • ask us to erase your data, in certain circumstances;
  • ask us to restrict how we process your data, in certain circumstances;
  • object to our processing of your data, in certain circumstances; and
  • ask us to transfer your data to you or another provider, in certain circumstances.

To exercise any of these rights, please contact us using the details below.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection, at ico.org.uk. We would welcome the chance to address your concerns first, so please do feel free to contact us before you approach the ICO.

12. Children’s privacy

Our service is intended for therapists and other professionals, and is not directed at children. We do not knowingly collect personal data from children through our service.

13. Changes to this policy

We may update this policy from time to time, to reflect changes in our service or in the law. When we do, we will update the date at the top of this page.

14. Contact us

If you have any questions about this policy, or you want to exercise any of your rights, please get in touch:

Code Meadow Limited
Email: code at codemeadow dot co.uk
Address: 104 Onslow Gardens, Wallington, SM6 9QG, United Kingdom

TheraPages - A Professional Website For Your Therapy Practice