Privacy notice
Version 1.0 · applies from 25 October 2026
In short: This website sets no cookies and does not track you. If you write to me, through the form or by email, I use what you send only to reply to you and to arrange an initial consultation. I do not share it with anyone else, sell it, or use it for marketing. Your message arrives in my email inbox. The companies that host the site and deliver the form are based in the United States and covered by the UK–US data bridge; my mailbox is stored in the UK. If we do not go on to work together, I delete your message within six months. You can ask me at any time what I hold about you, or ask me to delete it.
Who I am
I am Inna Schorr, a psychoanalyst in private practice in London. I am the “data controller” for this website, which means I decide what information is collected here and why. I work alone and am not required to have a data protection officer. For anything in this notice, email me at inna@inna-schorr.co.uk.
Visiting the website
Reading this website sends no information to me. The site sets no cookies, uses no analytics or advertising trackers, and loads nothing from third-party services except the spam check on the contact form (see below): the fonts and images are served from the site itself. There is nothing here you need to accept or decline.
The site is hosted by Cloudflare. Like any host, Cloudflare receives the technical details your device sends when it requests a page, including your IP address, and keeps them briefly in security logs. I do not see them. The legal basis is my legitimate interest in running a secure website.
Writing to me
When you send a message using the form on this website, I receive your name, your email address, your preferred language, whether you would like to meet in person or online, and anything you write in the optional message box. If you email me directly instead, I receive whatever you choose to send.
I use this to reply to you and to arrange a free initial consultation. In legal terms, these are steps you have asked me to take before we enter into an agreement to work together (UK GDPR Article 6(1)(b)). If your message is not about starting therapy, for example a professional question, I reply on the basis of my legitimate interest in answering people who contact me (Article 6(1)(f)).
I need your name and an email address to reply. Everything else is optional.
Cloudflare Turnstile protects the form from spam. It checks technical signals from your browser, such as your IP address, to tell a person from a program; it does not read what you type.
If you mention your health
Please do not include details of your health or your history in a first message. A few words about what you are looking for are enough, and we can talk about everything else in the consultation.
If you do, I treat it as I treat anything a prospective client tells me: in confidence, and only to understand what you are looking for and arrange a consultation. The legal basis is that this is part of providing health care, under a professional duty of confidentiality (UK GDPR Article 9(2)(h) and Data Protection Act 2018, Schedule 1, paragraph 2).
Where your message goes
A form message travels from the website, through Cloudflare, to the email service that delivers it, Postmark (operated by ActiveCampaign), and into my professional email inbox, provided by Zoho and stored in its UK data centre. The website itself does not keep a copy. An email sent directly to me goes straight to my inbox. I read my email on my own password-protected devices, with two-step verification switched on.
These companies act only on my instructions, under contracts that require them to protect your information. Nobody else receives your enquiry: not colleagues, and not whoever recommended me. I do not add you to any mailing list.
Information leaving the UK
My mailbox is held by Zoho in its UK data centre. Cloudflare and Postmark are based in the United States, so your message may pass through or be stored there. The UK government has decided that US companies certified under the Data Privacy Framework, with its UK Extension, protect personal information adequately; this is the “UK–US data bridge”, in force since 12 October 2023. These companies state that they are certified. If a certification lapsed, I would rely on the UK’s approved transfer contract terms instead.
How long I keep your message
| If… | Then I keep it… |
|---|---|
| We do not go on to work together | Until six months after our last exchange, then I delete it, including from my deleted-items folder. |
| You become a client | Your enquiry becomes part of your client record, and I will give you a separate notice explaining how I keep clinical notes, what stays confidential, and for how long. |
| Your message is caught as spam | It does not reach me and is not kept by me. |
Your rights
You can ask me for a copy of the information I hold about you, ask me to correct it, delete it, or stop using it, and object to my using it. You have the right to object to any processing based on my legitimate interests. You can also ask for a copy in a form you can take elsewhere. To use any of these rights, email me. I will reply within one month. I do not make automated decisions about anyone.
If something is wrong
If you are unhappy with how I have handled your information, please tell me first, by email. I will acknowledge your complaint within 30 days and tell you the outcome. You can also complain to the UK regulator, the ICO: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Changes to this notice
This notice applies from 25 October 2026, version 1.0. If I change it, the new version and its date will appear here.
← Back to the main page