Data Protection

I am committed to protecting and respecting your privacy and security. This policy explains how I collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

How is my data collected

I collect personal information that you provide through my website, email, or telephone during our initial enquiry and assessment. This includes identifiers like your name and contact details, as well as sensitive health information necessary for therapeutic support. I ensure that I only ask for what is essential to help me understand your needs and provide a safe service.

What info do I hold now

I may collect and process the following personal data:

Identifying Information: Name, contact details (phone number, email, address).
Personal Information: Information you share during assessment and therapy sessions or via voluntarily completed questionnaires, such as information about your current and previous psychological and physical health, your current and previous social and family circumstances, as well as possible sensitive personal information such as your religious/faith beliefs and your sexual behaviour or orientation, and GP details.
Administrative Information: Records of appointments, payments, and correspondence.

Why do I need your data

I use your information primarily to provide effective therapy, manage our appointments, and maintain professional clinical records. My lawful basis for processing this data is the performance of our contract and my legitimate interest in delivering safe care.

This involves following the lawful bases under UK GDPR:

Consent: You provide explicit consent for us to collect and use your data.
Contractual Obligation: To provide the counselling service you have requested.
Legal Obligation: Where required by law (e.g., safeguarding, court orders).
Legitimate Interest: To ensure the effective running of our practice.

As I handle health-related information, I also adhere to strict legal requirements for processing special category data.

Is my data shared area

I maintain strict confidentiality and only share your information with third parties if I am legally required to do so or if there is a serious risk of harm to yourself or others. In certain cases, I may need to consult with my clinical and peer supervisors, though your identity is always kept anonymous. I never sell your data or use it for marketing purposes without your explicit consent.

How long is data kept

I retain your personal information and clinical notes for a period of seven years after our work together has ended, in accordance with British professional standards. Once this time has elapsed, I ensure that all your records are securely deleted or physically destroyed.

What are my data rights

I take your privacy seriously and implement robust technical measures to keep your data secure against unauthorised access. You have the right to request a copy of the data I hold, ask for corrections, or request that your information be deleted under certain circumstances. I am committed to honouring your rights and will respond to any requests within the statutory timeframe.

I encourage you to contact me directly if you have any questions or concerns about how I handle your data. If you are not satisfied with my response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), which is the UK regulator for data protection.