Privacy Notice

Your privacy is extremely important to me, and I want you to feel confident that your personal information will be treated with the utmost care and security. It will only be used for the purposes for which you provided it. I comply with all relevant data protection laws, including the General Data Protection Regulation (EU/2016/679) (GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications (EC Directive) Regulations 2003.


What This Notice Covers

This privacy notice explains how I manage your personal data from the point of initial contact to after your therapy concludes. Specifically, it covers:

  • The legal basis for processing your data and the purpose of its use

  • Whether providing certain information is mandatory

  • The retention period for your data

  • Whether any third parties will have access to your personal information

  • Your rights regarding your personal data

I am registered as a "Data Controller" with the Information Commissioner's Office (ICO), meaning I am responsible for the collection, storage, and processing of your personal data.

Contact Information:
If you have any questions or concerns about this privacy policy, feel free to reach out to me:

Legal Basis for Collecting and Using Your Personal Data

Under the GDPR, I am required to have a valid legal basis for processing your personal data. These bases vary depending on the context in which I process your information:

After Therapy
If your therapy has ended, I rely on "legitimate interests" as the legal basis for retaining your personal information. This is necessary to carry out professional activities related to our prior work together.

During Therapy
If you are currently receiving therapy or are considering therapy, your personal data will be processed to fulfill our contractual relationship.

The GDPR also protects sensitive personal information, referred to as "special category data." In the case of counselling or psychotherapy, the legal basis for processing such sensitive data is for the provision of health services and is necessary for our professional contract.

How I Use Your Information

Initial Contact

When you contact me for more information about my services, I collect basic details such as your contact information, reason for reaching out, and some background information related to your psychological health.

If a healthcare provider, parent, or another trusted individual contacts me on your behalf, I may receive your information from them.

If you decide not to proceed with therapy, I will delete all of your personal data within 14 days. If you would like it deleted sooner, just let me know.

While Receiving Therapy

All information shared with me during sessions is kept confidential, unless there is an immediate risk of harm to yourself or others, you disclose involvement in terrorism-related activities, or a legal obligation compels me to share the information (such as a court order). If such circumstances arise, I will discuss them with you beforehand, unless immediate safety concerns prevent me from doing so.

I will keep a record of your personal details to ensure smooth service delivery. These details are stored securely on password-protected devices (phone, computer) and are never shared with third parties.

Brief session notes are kept anonymously on a separate password-protected hard drive and secured when not in use.

For your privacy, I do not retain text messages longer than 14 days. Any relevant information from text messages or emails will be transferred to your anonymized record and deleted from my phone or email.


After Therapy

Once therapy ends, I will retain your records for five years for professional and legal purposes. After this period, your records will be securely destroyed. If you wish to have your information deleted sooner, please let me know.

Third-Party Links & Use of Your Information

I will never share your data with third parties without your explicit consent, except where required by law or as necessary to fulfil our contract with you.

Our Service may include links to external websites that are not operated by us. This Privacy Policy does not cover the privacy practices or policies of these third-party sites. I recommend that you review the privacy policies of any external websites you visit, as we have no control over their content or how they handle your information.

Your Rights

You have several rights under data protection laws regarding your personal information, including:

  • The right to request access to your personal data

  • The right to ask for corrections if any of your information is inaccurate or incomplete

  • The right to request deletion or restriction of how I process your data

  • The right to object to certain types of processing

If you wish to exercise any of these rights, or if you want a copy of the information I hold about you, please contact me via email at mdf1jz@protonmail.com.

If you believe I am mishandling your personal data, you can contact me directly to raise your concerns. If you are not satisfied with the response, you have the right to make a complaint to the Information Commissioner's Office (ICO). More details can be found on their website: ico.org.uk/make-a-complaint.

Data Security

Protecting your data is a priority for me. I take robust measures to ensure your information remains secure, including the use of password-protected devices, encrypted communications, and secure storage for any written records.

Website Visitors

Like most websites, mine uses cookies and similar technologies to improve functionality and provide a better user experience. Cookies help track your visit and personalize content based on your preferences. You can adjust your browser settings to either notify you when cookies are used or to block them entirely.

No personal information is collected through cookies or shared with third parties. Any data you provide through my website forms will be temporarily stored by the web host before being sent to me directly.

Changes to This Privacy Notice

I may update this privacy notice from time to time to reflect changes in my data processing practices. When updates are made, the revised policy will be posted on my website, and if the changes are significant, I will notify you directly.


Last Updated: [25 November 2025]