Privacy Policy

1. Introduction

This Privacy Policy outlines how I collect, store, process, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. By engaging with my psychotherapy services, you consent to the processing of your data as described below.

2. What Personal Data I Collect

  • I collect and store personal data necessary for providing psychotherapy services, including:

  • Name, address, telephone number, date of birth.

  • Health information, including mental health history.

  • GP contact details and relevant medical information.

  • Session notes (anonymized and stored separately from contact details).

  • Other information necessary for clinical assessment and treatment.

3. Why I Collect Your Data

  • I process your data under the lawful basis of "Legitimate Interests" for healthcare purposes. This allows me to:

  • Assess your suitability for psychotherapy.

  • Provide effective therapy sessions.

  • Maintain professional obligations, such as supervision and ethical practice.

  • Contact you in case of an emergency.

4. Data Storage & Security

  • Your data is stored securely using:

  • Password-protected and encrypted electronic systems.

  • Locked physical storage for paper records.

  • Anonymisation where appropriate.

  • All data is retained for up to 7 years after therapy concludes, after which it will be securely deleted or shredded.

5. Data Sharing & Confidentiality

I respect your confidentiality and will not share your data unless:

  • Legally required (e.g., court orders).

  • You or another person is at risk of harm, in which case I may contact your GP or emergency services. I would always try to speak with you beforehand about this.

  • With your consent, for referral or continuity of care.

  • In the event of my unexpected incapacity, a nominated qualified psychotherapist may access your contact details to inform you.

6. Your Rights

Under GDPR, you have the right to:

  • Access your data within one month of request.

  • Request corrections to inaccurate data.

  • Request data deletion (except where retention is legally required).

  • Object to data processing.

  • File a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk/concerns

7. Data Transmission & Website Use

  • While I take security seriously, data transmitted via the internet is not completely secure. Any transmission is at your own risk. My website may collect limited data such as IP addresses for analytical purposes.

8. Contact Information

  • For any concerns or to exercise your rights, please contact me directly. Alternatively, you may contact the ICO https://ico.org.uk

By engaging in my psychotherapy services, you acknowledge and agree to this Privacy Policy.