Privacy, Data Protection & Complaints

Female Focused Therapy — Cheryl Kennedy MacDonald
Last updated: 3 November 2026

This notice explains how I collect, use, store and protect personal data when you visit this website, contact Female Focused Therapy, book a consultation or receive psychotherapy. It should be read alongside the Client Agreement, which explains confidentiality, clinical records, telehealth and the practical terms of therapy in greater detail.

Who is responsible for your data

Female Focused Therapy is operated by Cheryl Kennedy MacDonald in Singapore. For questions, access or correction requests, withdrawal of consent, or a privacy concern, contact cheryl@femalefocusedtherapy.com.

Personal data I may collect

  • contact and identification information, such as your name, email address, telephone number, location and emergency contact;
  • information you provide in enquiries, booking forms, screening or intake forms;
  • appointment, attendance, invoice and payment information;
  • health, relationship, life-stage and other sensitive information that you choose to share for the purpose of therapy;
  • clinical notes and relevant correspondence;
  • communications sent by email, Carepatron or WhatsApp where you choose to use those channels; and
  • limited website and device information collected through essential cookies, security tools, analytics or embedded content.

My practice is for adults aged 21 and over. I do not knowingly offer psychotherapy to children through this website.

Why I use your data

I collect, use and disclose personal data only for purposes that are reasonably connected with running a safe and ethical psychotherapy practice. These include:

  • responding to enquiries and helping you decide whether my service is suitable;
  • arranging and delivering consultations and psychotherapy;
  • supporting continuity of care, clinical decision-making and client safety;
  • managing appointments, payments, cancellations and practice administration;
  • maintaining records required for professional, insurance, safeguarding or legal purposes;
  • meeting the requirements of the Singapore Association for Counselling, the BACP Ethical Framework and applicable Singapore law; and
  • maintaining the security and functionality of this website.

I will notify you if I need to use your information for a materially different purpose and obtain consent where required by the Singapore Personal Data Protection Act 2012 (PDPA).

Carepatron, telehealth and service providers

I use Carepatron for functions including scheduling, forms, telehealth and secure clinical records. Carepatron and other carefully selected providers may process data on my behalf for hosting, email, website security, communications, payment or administrative services. They receive only the information reasonably required to provide the relevant service and are expected to protect it appropriately.

Where you give separate, optional consent to AI-assisted clinical documentation, session audio and a transcript are processed within Carepatron to produce a draft clinical note. I remain responsible for reviewing and finalising the clinical record. The specific processing and retention information is explained before consent and kept under review. You may decline or withdraw consent to AI-assisted documentation without losing access to therapy.

International processing

Some technology providers may store or process personal data outside Singapore. Where this occurs, I take reasonable steps to ensure that the transferred data receives a standard of protection comparable to that required under the PDPA.

Confidentiality and when information may be shared

What you share in therapy is confidential within the ethical and legal limits of psychotherapy. Information is not routinely shared with employers, relatives, insurers or other professionals without your consent.

Limited information may be shared where you have authorised it; with service providers acting on my behalf; in clinical supervision, with identifying details removed wherever practicable; or where disclosure is reasonably necessary because of a serious risk of harm, safeguarding concerns involving a child or vulnerable adult, a legal requirement, or serious criminal activity. Wherever possible and clinically appropriate, I will discuss a proposed disclosure with you first.

I do not sell your personal data.

How long information is kept

Personal data is kept only for as long as reasonably necessary for the purpose for which it was collected and to meet professional, insurance, safeguarding and legal obligations. Different categories of information may have different retention periods. When information is no longer required, it is securely deleted, destroyed or anonymised. The current clinical-record retention arrangements are set out in the Client Agreement.

Your choices and PDPA rights

Subject to the PDPA and any applicable exceptions, you may:

  • ask what personal data I hold about you and how it has been used or disclosed;
  • request correction of inaccurate or incomplete personal data;
  • withdraw consent to future collection, use or disclosure; and
  • ask a question or raise a concern about how your data is handled.

Withdrawal of consent does not affect processing that was already lawful. In some circumstances, withdrawing consent may mean that I cannot safely or lawfully continue providing a particular service. I will explain any likely consequences before acting on your request.

Marketing and communications

I will not add you to marketing communications simply because you make an enquiry or become a client. Where you have actively chosen to receive updates, you may unsubscribe or withdraw that consent at any time. Practical messages about an appointment or service are not marketing.

Website cookies and external content

This website may use essential cookies for security and functionality, and may include embedded or linked content from third-party websites. Those third parties may collect technical information in accordance with their own privacy notices. You can control non-essential cookies through your browser or the website’s cookie controls where available.

Security

I use reasonable administrative, technical and organisational safeguards to protect personal data. No website or internet-based service can be guaranteed completely secure, so I avoid making promises of absolute security. If a data breach is likely to cause significant harm or meets the PDPA notification threshold, I will take the steps required by law.

Questions, concerns and complaints

If you have a concern about privacy, therapy or the service you have received, you are welcome to contact me at cheryl@femalefocusedtherapy.com. I will take the concern seriously and aim to respond openly and fairly. You may also seek advice or make a complaint directly to the relevant professional or statutory body:

Using an external complaints route may require relevant information about the therapeutic work to be disclosed to that body so that the concern can be considered.

Changes to this notice

I may update this notice when the practice, technology, professional requirements or law changes. The date at the top shows when it was last revised.