Privacy & Data Protection
Your privacy and the confidentiality of your information are very important to me. This notice explains what personal data I collect, why I use it, how I protect it, and how long I keep it.
What personal data do I collect?
Depending on our work together, I may collect and process:
Your full name
Email address
Information necessary to arrange and conduct therapy
Information you voluntarily provide during therapy sessions
Therapy and clinical notes relating to your treatment
Therapy information may include sensitive information concerning your physical or mental health. Such information is treated as confidential and is subject to additional protection under applicable data protection law.
Why do I process your data?
Your personal data is processed only where it is necessary to:
Provide and manage your therapy
Communicate with you regarding appointments and your therapy
Maintain appropriate professional and clinical records
Meet applicable legal, professional and record-keeping obligations
Protect your rights and the rights of others
I follow the principles of data minimisation and purpose limitation and only collect and use information that is necessary for these purposes.
How is your data stored and protected?
Personal data is stored securely and access is restricted to information necessary for providing your therapy.
Electronic therapy records are stored locally on a password-protected computer. Therapy notes are additionally protected by a separate password.
Where physical notes are used, they are kept in a secure, locked location.
Therapy notes are anonymised or pseudonymised wherever reasonably possible so that they do not unnecessarily contain directly identifying information.
Appropriate technical and organisational measures are used to protect personal data against unauthorised access, loss, destruction or disclosure.
Who has access to your data?
Your personal and therapy information is treated as confidential. It is not sold, rented or used for advertising.
Access is limited to what is necessary for providing your therapy and fulfilling applicable legal or professional obligations.
Where external service providers are used to support the provision of services—for example, email, scheduling, IT or website services—your data may be processed by those providers where necessary and subject to appropriate data protection safeguards.
How long do I keep your data?
I retain personal and clinical information for as long as it is necessary for the purposes for which it was collected and to meet applicable legal and professional record-keeping requirements.
Where a 10-year retention period applies to essential therapy and clinical records, these records will be retained for 10 years following the end of the therapeutic relationship.
Information that is no longer necessary and is not subject to a legal or professional retention requirement will be securely deleted or anonymised.
This approach follows the GDPR principle that personal data should not be retained in identifiable form for longer than necessary.
Your data protection rights
Subject to applicable legal exceptions, you may have the right to:
Request access to the personal data I hold about you
Request correction of inaccurate or incomplete information
Request deletion of your personal data where there is no longer a lawful reason to retain it
Request restriction of processing in certain circumstances
Object to certain processing
Request a copy of your personal data where the right to data portability applies
Withdraw consent where processing is based on consent
These rights are subject to certain limitations, particularly where information must be retained to comply with legal or professional obligations.
Questions or requests
If you have any questions about how your personal data is processed, or if you wish to exercise your data protection rights, please contact me using the contact details provided on this website.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your personal data has not been processed in accordance with applicable data protection law.
Changes to this notice
This privacy notice may be updated from time to time to reflect changes in legal requirements, professional practice or the way personal data is processed. The current version will always be made available on this website.