Get your practice’s
GDPR documents sorted.

The data-protection complaints duty comes from UK law, through the Data (Use and Access) Act 2025, and is overseen by the Information Commissioner's Office (ICO). It took effect on 19 June 2026 and applies to practices responsible for clients' personal information, regardless of professional-body membership. It concerns how personal information is handled. Your professional body may also have separate requirements.

No. Buying this service is optional. You can prepare and maintain your own privacy documents and complaints process using ICO guidance, adapt an existing process, or use another provider or adviser. The ICO does not require a separate complaints tool, as long as your process meets your obligations. Our service brings tailored documents and complaints tools together to help you organise this work.

The time depends on your practice and the details you have to hand. Guided questions cover your work, records and software, and your answers are used to prepare the documents for you to review. Have your software names and record-retention arrangements handy. You can save each section and return later, so you do not need to finish in one sitting.

A banner manages website cookie choices. Your policies also need to reflect your own software, record keeping and sharing arrangements, alongside a working complaints process. The service helps you prepare those documents and manage data-protection complaints in one place.

A privacy notice, cookie and storage policy, retention policy, data protection statement and complaints procedure. An Appropriate Policy Document is included when your confirmed answers call for one. You can download PDF and editable HTML copies.

Yes. Drafts are tailored from your practice answers and, where relevant, confirmed website findings. You read and approve them before publication. To make changes in the service, update your answers and generate revised drafts. There is no direct free-text editor for hosted policies. You can edit downloaded HTML copies separately, but those edits do not update the hosted versions.

Publishing creates your hosted policy page; it does not edit your website. Optional website setup costs £15 one-off, including VAT. Once you have reviewed and published your policies, we add the links and configure and test your cookie controls. We check that services requiring consent are blocked before permission and test rejection, acceptance and withdrawal. We add our cookie banner and turn off your old one. Without this option, you or your website editor completes those steps.

We provide a complaint form, acknowledgements and case records, plus help with using the system. Optional website setup covers adding your published policy links and configuring and testing cookie controls. Neither the subscription nor website setup includes investigating or managing individual complaints on your behalf, or legal advice or representation. You remain responsible for investigating complaints and responding to the person who raised them.

Your practice is the data controller; we store complaint details and recorded responses on your behalf as its processor. 20i hosts the database and service email in the UK. Encrypted recovery backups are stored with Backblaze in the Netherlands. Access is restricted to authorised practice users and service/provider personnel who need it for support, maintenance or recovery. Protections include HTTPS, email-code sign-in, practice access controls and encryption of sensitive complaint fields. Responses sent by email also pass through the recipient's email provider. Our terms include the data-processing agreement and provider schedule. Read our privacy notice. Read our data-processing terms.

Complaint records have no fixed automatic deletion period. We retain them while providing the service and until return or deletion is arranged with you, subject to legal retention requirements. Export my practice data downloads your saved complaint details and recorded responses, documents and versions as a structured JSON data file. Contact support to arrange appropriate deletion; it is not an immediate delete button. Routine recovery backups expire after 30 days. Deleted records awaiting backup expiry are kept beyond normal use, and any restoration must reapply the deletion. Read the retention details.

The current subscription is £24 a year, including VAT. We do not guarantee that price indefinitely. If it changes, we will email you before your renewal so you can decide whether to continue. You can cancel renewal from your account and keep access until the end of the year you have paid for.

Cancelling renewal keeps full access until the paid year ends. While your account is retained, existing documents remain downloadable and you can still manage and export complaint records; changing practice answers or generating new documents needs an active subscription. Policies download as PDF or HTML, and the account export includes complaint details and recorded responses. Saved copies remain yours. Published policy pages stay available until withdrawn; cancellation alone does not remove them. Account closure and deletion are arranged separately. If hosted policies are withdrawn or deleted, your website links and any cookie controls relying on them need updating. Read the cancellation terms.

No. TheraComply is charged separately from website packages, care plans and migrations. Annual access is £24 including VAT. Optional website setup adds £15 once at signup and does not renew. Website migration is a separate service and quote.

Document setup does not ask for client names, therapy notes or case records. The separate complaints system receives the contact details and information that a complainant submits.

We email you when we release updated document wording, so you can review it and generate, approve and publish replacements. Published policies are never silently rewritten. Material changes to our service terms are also notified by email. This is not comprehensive monitoring of every legal or professional-body requirement; continue to review notices from your own professional body, including BACP where applicable.

No. The documents provide general information based on your answers and source-linked content. You remain responsible for checking that they reflect your practice and for handling complaints. Unusual or unresolved situations may need independent professional advice.