Privacy Notice
What information I collect
I collect the following pieces of personal information:
telephone number
email address
information you might share relating to your health (GP surgery name, prescriptions, etc)
You give me this information directly, usually when you first contact me or when we agree to begin therapy.
I do not use cookies, tracking or marketing tools to gather information about you.
Why I use your information and my lawful basis
I use your phone number and email address only to contact you about your therapy while we are working together, for example to:
arrange, confirm, change or cancel appointments
send session links if we meet online
send invoices or payment reminders
contact you about anything else directly related to your therapy
I will never use your details for marketing, and I will never sell them.
How I keep your information safe and who I share it with
I keep your contact details secure and confidential, in line with UK GDPR and the UKCP Code of Ethics. My safeguards include:
storing your details only on an encrypted hard drive
protecting devices and accounts with strong passwords and two-factor authentication
never saving your details under a label that reveals you are a therapy client
keeping any paper records in a locked cabinet
I do not share your information with anyone, except in these limited circumstances:
where the law requires it, for example a court order
where there is a serious risk of harm to you or to others, as set out in our therapy agreement and the UKCP Code of Ethics
with my clinical supervisor, but only in anonymised form, with nothing that could identify you
Some of the services I use to store or send information, such as my email and phone providers, act as data processors on my behalf. They may only use your information on my instructions.
How long I keep your information
While we are working together, I keep your contact details so I can reach you about your therapy.
When therapy ends, I stop using your details to contact you. I then keep them only for as long as necessary to meet my legal, insurance and professional obligations.
At the end of this period, I securely and permanently delete your information from all devices and accounts, and shred any paper copies.
Your rights
Under UK data protection law you have the right to:
Be informed about how your information is used
Access the personal information I hold about you
Rectification – ask me to correct information that is wrong or incomplete
Erasure – ask me to delete your information, where I no longer have a legal reason to keep it
Restrict how I use your information in certain circumstances
Object to my use of your information where I rely on legitimate interests
Data portability – receive your information in a commonly used format
Some rights are limited. For example, I may not be able to delete your details during the retention period if the law requires me to keep them. If so, I will explain why.
To use any of these rights, contact me using the details above. There is no charge. I will respond within one month, which may be extended by up to two further months for complex requests; I will tell you if this happens. I may ask you to confirm your identity before I respond.
How to make a complaint
If you are unhappy with how I have handled your personal information, please tell me first so I can try to put it right.
Send your complaint to me by email or post, using the contact details above.
I will acknowledge it within 30 days.
I will look into it without undue delay and tell you the outcome and any steps I am taking.
If you are not satisfied with my response, you can complain to the Information Commissioner's Office:
Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF