Privacy Policy

Your Privacy

I take your privacy and confidentiality seriously. This policy explains how I collect, use and protect your personal information when you visit my website, contact me or attend therapy.

I am registered with the Information Commissioner's Office (ICO) and am responsible for handling your information in accordance with UK data protection legislation.

Information I Collect and Why

When you contact me or attend therapy, I may collect your name, contact details, appointment and payment information, relevant personal history and clinical information.

This may include sensitive information relating to your physical or mental health, relationships, sexuality and sexual wellbeing.

I use this information to respond to enquiries, arrange appointments, provide therapy, maintain clinical records, process payments and meet my professional and legal responsibilities.

Under UK GDPR, I process personal information on appropriate lawful bases, including contract, legal obligation and legitimate interests, depending on the purpose.

Sensitive information, known as special category data, receives additional legal protection and is processed only where an appropriate legal condition applies.

Confidentiality and Supervision

Information shared during therapy is confidential.

I undertake regular clinical supervision as part of my professional responsibilities. Clinical material may be discussed in supervision, with identifying information minimised wherever possible. Supervision is subject to professional confidentiality obligations.

Confidentiality may need to be limited where there are serious safeguarding concerns, a serious risk of harm, or a legal requirement to disclose information.

Where appropriate and reasonably possible, I will discuss any necessary disclosure with you beforehand.

How I Store Your Information

Client contact details and administrative information are held electronically on my computer and, where necessary, within the online services used to manage appointments and payments.

Clinical session notes are kept on paper and are not uploaded to online storage services.

I take appropriate measures to protect both electronic and paper records from unauthorised access, loss or disclosure.

I normally retain adult clinical records for seven years after therapy ends, unless there is a justified legal or professional reason to retain them for longer.

Other information is retained only for as long as necessary, including where financial record-keeping requirements apply. Records are securely destroyed or deleted when no longer required.

Website, Bookings and Payments

My website is hosted by Squarespace, and online appointments are managed through Acuity Scheduling.

When you complete a contact form or book an appointment online, the information you provide is processed through these services.

Payments may be made by bank transfer or through online payment facilities. Online payment information is handled by the relevant payment provider.

My website uses essential cookies and may use optional analytics cookies. Where consent is required, you can manage your preferences through the website's cookie settings.

Some website and booking information may be processed outside the UK, subject to applicable data protection safeguards.

Further information about website data processing is available in the Squarespace Privacy Policy.

Your Rights

Under UK data protection law, you have rights concerning your personal information, including the right to:

  • Request access to information held about you.

  • Request correction of inaccurate information.

  • Request deletion or restriction of information in certain circumstances.

  • Object to certain uses of your information.

  • Request transfer of information where applicable.

  • Withdraw consent where processing is based on consent.

These rights are subject to applicable legal exceptions.

If you have any questions or concerns about how your information is handled, please contact me. I will acknowledge data protection complaints within 30 days and investigate them in accordance with legal requirements.

You may also raise concerns with the Information Commissioner's Office at www.ico.org.uk.

This policy may be updated to reflect changes in legislation or my professional practice.