Privacy Policy

1. What Personal Data I Collect

​

1.1 Data collected via my website

If you contact me through my website, I may collect:

• Your name

• Email address

• Phone number

• Any information you include in your message

My website does not use Google Analytics or cookies for tracking.

​

1.2 Data collected during psychological therapy

When you engage in therapy with me, I collect:

• Full name

• Date of birth

• Address

• GP details

• Emergency contact

• Relevant medical or mental health history

• Psychological assessment data (paper and digital)

• Session notes

• Payment or invoicing information (if applicable)

This may include special category data, such as information relating to mental health.

​

1.3 Data collected for online therapy

If you attend sessions online, I may process:

• Your video conferencing username

• Your email for session links

• Any information shared during online sessions

I do not record sessions.

 

2. Lawful Basis for Processing Your Data

Under the UK GDPR, I rely on the following lawful bases:

For therapy and assessment services

• Contract – to provide psychological services.

• Legitimate Interests – practice administration and record keeping.

• Legal Obligation – safeguarding or mandatory reporting.

• Vital Interests – to protect life in an emergency.

• Special Category Data – processed under Article 9(2)(h) (healthcare services).

For website enquiries

• Legitimate Interests or Contract – to respond to your enquiry and arrange sessions.

Marketing

I do not use your personal data for marketing.

 

3. How I Use Your Data

I use your data to:

• Respond to enquiries

• Provide psychological therapy

• Carry out psychological assessments

• Maintain clinical records

• Manage appointments and communication

• Submit invoices and process payment information

• Fulfil legal, regulatory, and professional obligations

• Provide online sessions where requested

I do not sell or share your information for marketing or commercial purposes.

 

4. Who I Share Your Data With

I will only share your information in the following limited circumstances:

• Clinical supervision: Discussed anonymously in line with professional standards.

• Safeguarding concerns: If there is serious risk of harm to you or others.

• Legal obligations: When required by law or a court order.

• Healthcare professionals: With your consent (e.g. if contacting your GP).

• Service providers:

  • Email provider

  • Video-conferencing platform for online therapy

  • Digital assessment platforms

I aim to discuss any disclosure with you first, unless it is unsafe or unlawful to do so.

 

5. How I Store and Protect Your Data

I store your data in the following ways:

Paper records

• Handwritten session notes are kept in locked storage accessible only to me.

Digital records

• Assessment data and related documentation are stored on password-protected and encrypted digital devices or secure platforms.

• Emails are stored securely via my email provider.

• Online therapy sessions are conducted via secure, encrypted platforms.

• I do not record audio or video sessions.

Retention periods

• Therapy and assessment records are kept for 7 years after the end of therapy.

• For young people, records are kept until 7 years after their 18th birthday.

• Website enquiry messages are kept for up to 12 months unless therapy commences.

At the end of the retention period, data is securely destroyed.

 

6. Cookies and Tracking

My website does not use cookies or Google Analytics.
Your visit is not tracked, profiled, or analysed by third-party tools.

 

7. Your Rights Under UK GDPR

You have the right to:

• Access the personal data I hold about you

• Correct inaccurate or incomplete information

• Request erasure of your data (where applicable)

• Restrict processing of your data

• Object to certain types of processing

• Request data portability

• Withdraw consent where consent is relied upon

To exercise these rights, please contact me using the details above.

 

8. Complaints

If you are concerned about how I handle your data, please contact me in the first instance.

You also have the right to complain directly to the Information Commissioner’s Office (ICO):
Website: www.ico.org.uk
Helpline: 0303 123 1113

 

9. Updates to This Policy

I may update this Privacy Policy from time to time. The most recent version will always be available on my website.