Privacy Policy

I take your privacy and confidentiality very seriously. This page explains how I collect, use, and protect your personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the UKCP Code of Ethics.

Who I Am

I am a UKCP-registered psychotherapist and the data controller responsible for your personal information.
I am registered with the Information Commissioner’s Office (ICO): www.ico.org.uk

What Information I Collect

To provide psychotherapy safely and effectively, I may collect:

Your contact details (name, phone number, email, address).
Personal details, such as date of birth or GP contact information.
Therapy-related information, including what you share during sessions.
Administrative details, like payments, invoices, and appointment records.

I only collect information that is relevant and necessary for our work together.

How I Use Your Information

Your information is used to:

Provide psychotherapy and maintain professional records.
Communicate about sessions, fees, or scheduling.
Meet professional, ethical, and legal obligations.
Ensure appropriate continuity of care.

Your data is never shared for marketing or non-therapeutic purposes.

Lawful Basis for Processing

Under UK GDPR, I process your information based on:

Contract – to deliver the therapy you have requested.
Legal obligation – to keep records required by professional bodies or insurers.
Vital interests – if there is a risk of serious harm to you or others.
Consent – if I need to share information (for example, with your GP), I will always ask for your explicit permission.

Confidentiality and When It Might Be Broken

Everything shared in therapy is confidential.
However, I may need to share information if:

There is a serious risk of harm to you or someone else.
I am legally required to disclose information (e.g. terrorism, drug trafficking, child protection).
A court orders disclosure.

Whenever possible, I will discuss this with you first.

How I Store and Protect Your Data

Notes are kept securely and are brief, factual, and anonymised where possible.
Paper records are stored in a locked cabinet; electronic records are password-protected.
Records are stored for up to seven years after therapy ends, then securely deleted or destroyed.

Your Rights

You have the right to:

Access the personal information I hold about you.
Request corrections to inaccurate data.
Request your data be deleted (in certain circumstances).
Restrict or object to how your data is used.
Withdraw consent (where relevant).

Communication

Email, text, or phone are used for session scheduling or practical matters only.
While I take care to protect your privacy, electronic communication cannot be guaranteed to be fully secure.

Policy Updates

This privacy policy is reviewed regularly and may be updated to reflect changes in regulation or practice. The latest version will always appear on this page.

Last updated: [17 April 2026]