Privacy Policy

Privacy Policy
Carolyn Elizabeth Counselling
Effective Date: 01/03/2025

At Carolyn Elizabeth Counselling, we are committed to safeguarding the privacy of our clients and website visitors. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller Carolyn Elizabeth Counselling is the data controller responsible for processing your personal information. If you have any questions regarding this policy, you can contact us at:
 

Carolyn Elizabeth Counselling
Carolynelizabethcounselling@outlook.com

07359629920

2. Information We Collect

We may collect and process the following personal data:

• Personal Information: Name, date of birth, address, phone number, email address.
• Health Information: Relevant medical or mental health history provided by you for therapeutic purposes.
• Session Notes: Brief notes recorded for therapeutic reference.
• Payment Information: Transaction details (processed securely through third-party providers).
• Website Data: IP address, cookies, and usage data when interacting with our website.

3. How We Use Your Information

We collect and use your data for the following purposes:

• To provide counselling and therapy services.
• To manage appointments,  payments, and communications.
• To comply with legal and ethical obligations.
• To respond to inquiries and provide support.
• To improve our services and website functionality.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing personal data:

• Contractual Necessity: To provide counselling services to you.
• Legal Obligation: To comply with professional and legal requirements.
• Legitimate Interests: To manage our practice effectively.
• Consent: For specific purposes, such as marketing or sharing data with third parties.

5. Confidentiality and Data Sharing

We treat your information with the strictest confidence. However, we may share data in the following circumstances:

• With Your Consent: Where you have given explicit permission.
• Legal Requirements: If required by law, safeguarding concerns, or court orders.
• Professional Supervision: Anonymous case discussions in line with ethical guidelines.
• Third-Party Service Providers: Secure processing of payments or IT support.

6. Data Retention

We retain your personal data only for as long as necessary:

• Therapy notes and records: Kept securely for 7 years after therapy ends (in accordance with professional guidelines).
• Financial records: Retained for 6 years for tax and accounting purposes.
• Website data: Retained in line with our cookie policy.

After these periods, your data will be securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct any inaccurate information.
• Erasure: Request deletion of your  data (subject to legal requirements).
• Restriction: Limit how we use your data.
• Objection: Object to processing based on legitimate interests.
• Data Portability: Request transfer of your data where applicable.

To exercise your rights, please contact us using the details above.

8. Data Security

We implement strict security measures to protect your data from loss, misuse, and unauthorised access. These include:

• Encrypted electronic records.
• Secure storage of paper-based files.
• Limited access to data on a need-to-know basis.

9. Complaints

If you have concerns about how we handle your data, please contact us directly. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: https://ico.org.uk
Phone: 0303 123 1113

10. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on our website, and where appropriate, notified to you directly.

By using our services, you acknowledge that you have read and understood this Privacy Policy.