Privacy Policy

Last reviewed and updated – March 2024


ORTUS is operated by Maudsley Charity Trading CIC which is wholly owned by Maudsley Charity and is registered in England and Wales. Maudsley Charity is the charitable organisation which works in partnership with South London and Maudsley NHS Foundation Trust and the Institute of Psychiatry, Psychology and Neuroscience, King’s College London to promote positive change in the world of mental health. The Charity supports innovation, research and service improvement, working with patients and families, clinical care teams, researchers and community organisations with a common goal of improving mental health. Our full address is 82-96 Grove Lane, London SE5 8SN. Our company number is 08122704.

Maudsley Charity Trading CIC is registered and fully compliant with the UK Data Protection legislation (Reg. No: ZA615096) and acts as data controller when we collect personal data from our customers, prospective customers, and other stakeholders.

ORTUS is serviced by Vacherin Ltd as agent. As part of the relationship with Maudsley Charity Trading CIC, Vacherin Ltd acts in the capacity of data processor on behalf of Maudsley Charity Trading CIC who is the data controller. This means both organisations have access to, and control of how your personal and financial data is collected, used and stored.

If you have any questions about our privacy policy, then please contact a member of our team who will be happy to talk you through it.

Our contact details are:

Maudsley Charity,
82-96 Grove Lane,
London SE5 8SN


Tel: 020 3696 9760 (select option 4)

Our approach to managing personal data

We collect personal data for processing in order to deliver the service we offer, manage the booking journey and other related operational tasks, including accounting and finance. We will also ask for consent for data processing to comply with the relevant Data Protection Legislations and where appropriate.

Principles we will maintain

  • When we ask for personal data we will outline how we will use and manage it and, where appropriate, ask for your consent to do so.
  • We will not use this personal data for other purposes without asking your permission.
  • We will not keep this information for longer than necessary. We maintain organisational retention schedules which set out the retention periods for the data we collect.
  • We will not use third parties to process your data without taking reasonable steps to ensure they comply with the UK Data Protection legislations and the UK General Data Protection Regulation.
  • We will never sell your data to third parties.

How we collect data

Maudsley Charity Trading CIC collects personal data through:

  • Booking enquiry forms
  • New customer forms
  • Contact forms
  • Surveys
  • Contact via phone or email
  • Web analytics tools

We will ensure that all personal information supplied is held in accordance with the UK Data Protection legislations including the UK General Data Protection Regulation (UK GDPR).

This would only apply to data collected under our controlled domain, if you visit another website by clicking on their links, we will have no control over their data collection and processing practice, please view their respective privacy policies for further details.

Data location and security

Personal data is collected and stored securely subject to appropriate security measures and is protected against misuse.

Your personal data is primarily held in electronic form. Electronic data is held on secure servers, and in some circumstances, on servers owned by third-party contractors. Our online bookings system is hosted on Amazon Web Services, and data is held within EU. We ensure that any third-party contractors we use comply with the UK Data Protection legislation and EU General Data Protection Regulations. Data in paper form is held securely and destroyed securely.

Your rights over your data

  • Right to be informed: organisations must tell individuals what data is being collected, how it’s being used, how long it will be kept and whether it will be shared with any third parties.
  • Right of access: individuals have the right to request a copy of the information that an organisation holds on them.
  • Right of rectification: individuals can correct inaccurate or incomplete data.
  • Right to be forgotten: in certain circumstances, individuals can ask organisations to erase any personal data stored on them.
  • Right of portability: in some circumstances, individuals can request that an organisation transfer any data that it holds on them to another company.
  • Right to restrict processing: in some circumstances, individuals can request that an organisation limits its use of personal data.
  • Right to object: individuals have the right to challenge certain types of processing, such as direct marketing.
  • Rights related to automated decision making, including profiling: under most circumstances, individuals have the right to object to having decisions made about them by automated processes or profiling


Cookies are text files stored on your computer, and accessible only to the websites which create them.

As per the requirements under the Privacy and Electronic Communications Regulations (PECR), upon entering our website you will be presented with a banner where the options are listed, besides “Necessary Cookies” which is used for the proper function of the website, traffic management, load balancing etc, this is considered necessary hence not declinable. All other cookies would require consent from the site user and options are presented to provide freedom of choice.

Please note that functional cookies if disabled, certain features may not function as intended.
Further information about cookies can be found on the Interactive Advertising Bureau’s website

Social media

If you share our content through social media, for example by liking us on Facebook or following or tweeting about us on X (formally Twitter), those social networks will record that you have done so. They may set a cookie for this purpose.

In some cases, where a page on our website includes content from a social network, such as a X feed, or Facebook comments box, those services may set a cookie even where you do not click a button. As is the case for all cookies, we cannot access those set by social networks. Social networks cannot access cookies we set ourselves.

Google Analytics

Our website uses Google Analytics (GA4), a web analytics service provided by Google, Inc. (“Google”). The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google. Further information about Google’s privacy policy may be obtained from

Disclosure of your information

We may disclose your personal information to third parties:

  • In the event that Vacherin Limited is acquired by a third party, in which case personal data held about our customers will be one of the transferred assets.

If we are under a duty to disclose or share your personal data in order to comply with any legal obligation. This includes exchanging information with other companies and organisations for the purposes of fraud prevention, detection, and credit risk reduction.

Complaints, compliments, or comments

If you are unhappy with our work or something that we have done or failed to do, we want to know about it. We also welcome your views on what we do well. Your comments enable us as an organisation to learn and continuously improve our services. If you would like to make a complaint, compliment or comment then please get in touch with us on:

Maudsley Charity
82-96 Grove Lane
London SE5 8SN


Tel: 020 3696 9760 (select option 4)

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane

Helpline number: 0303 123 1113

ICO website:

Changes to this notice

We will review and update this notice in line with best practice and changes in legislation. We will always have an up-to-date version of the notice on this page or clearly signpost its location on the site under ‘Privacy policy’.