This privacy statement reflects my responsibilities under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended from time to time.

​

Confidentiality/sharing of information

Notes are kept for each session. I keep very brief anonymised notes of key themes discussed in our sessions. The purpose of recording this is for my own recollection and to monitor the work we are doing. In line with industry standards notes are retained for 7 years. All information collected will not be shared with anyone else. I will not sell your information and will not use it for any purposes other than those related to Therapy.

 

There are however exceptions that may require me to share your information with a third party, details of which are outlined below. Please note that a decision to breach confidentiality is not taken lightly and all due consideration to your privacy is taken into account.

​

Confidentiality may need to be breached in the following circumstances

:• There is significant risk of harm to yourself, in this instance information may need to be shared with a GP or other professional.

• There is information shared that suggests a child/vulnerable adult is being harmed or is at risk of harm. In this instance information may need to be shared with relevant services.

• If there is disclosure of drugs trafficking, terrorism or money laundering I am legally obliged to disclose this information to the police.

• Finally, if I am subpoenaed by court to share any information then I must do so upon request.

 

I may at times share my case work with a supervisor who is a qualified counsellor and adheres to the same confidentiality and privacy requirements. All information shared is anonymous to avoid identification.

 

​

What is collected and why?

​

I will collect and store your name, date of birth and age. This is basic information that helps me to get to know you better but is also stored for lawful and safeguarding purposes (see confidentiality/ sharing of information statement).Your Address, email address and phone number are recorded and stored as a means of contacting you regarding your sessions. I will usually contact you using the method you first contacted me on but if I can’t reach you, I will try a different method. These details may also be used for emergency purposes where there is an evident risk of harm to yourself (see confidentiality statement).

 

GP details are recorded for safeguarding purposes whereby if I have concern for your wellbeing and safety I may have to contact your GP. Where possible I will seek to get your consent and inform you before doing so.

Next of kin details are recorded for emergency contact only in case of a medical emergency.

 

Data storage and Disposal

​

All data I collect is stored either in a locked filing cabinet or stored securely in a password protected file within the Kiku system. I keep your contact number stored on my passcode protected phone. All confidential information is handled in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable professional and ethical requirements. Electronic records are maintained using the secure and encrypted Kiku system.For video counselling, your email address is stored on my password protected PC. You can check the details for Zoom GDPR compliance at https://zoom.us/gdpr

If working on-line, my computer is updated regularly with anti-virus software and secured by a password. I work in a confidential space, where I cannot be overheard. It is your responsibility to ensure that you cannot be overheard during our sessions, and you have adequate antivirus software on the device that you will be using.

 

Your Rights Under the UK General Data Protection Regulation (UK GDPR),

​

You have the following rights in relation to your personal data:

• The right to be informed about the collection and use of your personal information as described herein.

• The right to access copies of any information held about you, this can be accessed through a data subject access request, and the right to receive a response to this request within a period of no more than 1 month.

• The right to rectification; to have inaccurate personal data rectified or completed If incomplete.

• The right to erasure; you have the right to opt out of data collection. If you wish to do so please make this request in writing, however some data cannot be erased and will need to be retained for lawful purposes and in line with my insurance policy

.• The right to Data portability. You have the right to obtain and reuse your personal data for your own purposes across different services.

• Finally, you have the right to object to any personal data being collected. This will need to be made known in advance or at the start of any Therapy commencing. Please note if this is the case all therapeutic work will be terminated as I am required to keep appropriate records in line with my insurance and ethical body as well for legal and safeguarding matters.

 

Raising Concerns

 

If you have any concerns about the service you receive, please raise them with me in the first instance so that I have the opportunity to address them. If the matter is not resolved, I am registered with the British Association for Counselling and Psychotherapy (BACP), registration number 340457.

 

Data Protection Complaints

 

I take your privacy seriously. From 19 June 2026, if you have a concern about how I collect, use, store or share your personal data, you have the right to make a data protection complaint directly to me in the first instance. You can raise your complaint in writing by email or letter, and I will acknowledge it within 30 days of receipt, investigate it appropriately, and provide you with an outcome without undue delay. If you remain dissatisfied, you also have the right to complain to the Information Commissioner’s Office (ICO).