Privacy Policy

Introduction

Your privacy is very important to me. You can be confident that your personal information will be kept safe and secure and will only be used for the purpose for which it was provided.

I adhere to current UK data protection legislation, including:

The UK General Data Protection Regulation (UK GDPR)
The Data Protection Act 2018
The Privacy and Electronic Communications Regulations 2003 (PECR)
The Data (Use and Access) Act 2025

This Privacy Notice explains how I collect, use, store and protect your personal information from initial contact through to after counselling has ended. It explains:

Why I process your information
The lawful basis for processing
Whether you are required to provide personal information
How long information is retained
Who information may be shared with
Whether information is transferred outside the UK
Whether automated decision-making is used
Your rights regarding your personal information
How to make a data protection complaint

I am happy to chat through any questions you might have about my data protection policy and you can contact me via abbey@therapywithabbey.co.uk. ‘Data controller’ is the term used to describe the person/organisation that collects and stores and has responsibility for people’s personal data. In this instance, the data controller is me.

Lawful Basis for Processing Personal Information

Initial Enquiries and Therapy Services

If you contact me regarding counselling services or engage in counselling sessions, I process your personal information because it is necessary for the performance of a contract between us under Article 6(1)(b) UK GDPR.

Former Clients

Once counselling has ended, I retain certain information where necessary for my legitimate interests, including maintaining professional records, responding to legal claims, complying with professional requirements and managing my practice.

Special Category Data

The GDPR also makes sure that I look after any sensitive personal information that you may disclose to me appropriately. This type of information is called ‘special category personal information’. The lawful basis for me processing any special categories of personal information is that it is for provision of health treatment (in this case counselling) and necessary for a contract with a health professional (in this case, a contract between me and you).

Website Privacy Information

This website statement applies to: www.therapywithabbey.co.uk to explain what information we gather about you and how your data is used whilst accessing or interacting with any pages belonging to the website; www.therapywithabbey.co.uk

Information collected about you:

Certain information about you may be collected from you by cookies when using pages from www.therapywithabbey.co.uk It may be possible to ascertain certain information about you from the IP address on the computer you use, Abbey Brocklehurst will not share this information without your prior consent.

What are cookies?

Cookies are small files stored on your device when you visit a website.

Cookies may be used to:

Improve website functionality
Remember user preferences
Monitor website performance
Analyse website traffic
Improve user experience

Traffic and analytical information collected through cookies is used only for statistical purposes and to improve the website.

You may disable cookies through your browser settings, although this may affect website functionality.

External Links

My website may contain links to external websites. Once you leave my website, I am not responsible for the privacy practices of other websites. You should review the privacy notice of any external site you visit.

Information I Collect

I may collect the following personal information:

Name
Date of birth
Address
Telephone number
Email address
Gender (where relevant)
GP details
Emergency contact details
Information relating to your health, wellbeing and counselling needs
Payment information where relevant

Information is collected directly from you when you:

Contact me by email, telephone or website enquiry
Attend an assessment session
Participate in counselling sessions

Assessment Information

Prior to or during assessment, I may collect information regarding:

Your reasons for seeking counselling
Relevant personal history
Risk and safeguarding considerations
GP details
Emergency contact information

You will be provided with information regarding confidentiality, data protection and informed consent. Assessment records are stored securely.

Therapy Notes

During counselling I make brief notes to support safe and effective practice. Session notes are anonymised wherever possible and contain only information necessary for professional record keeping. Notes are stored securely and access is restricted to me.

Other Records Maintained

I may also retain:

Enquiry Emails

Initial enquiries are retained for up to 6 months and then securely deleted if counselling does not proceed.

Financial Records

Invoices and accounting records are retained for the period required under HMRC regulations, currently at least 6 years following the relevant tax year.

Bank Records

Where payments are made by bank transfer, your name may appear on bank statements retained for accounting and legal purposes.

How Your Information Is Stored

Personal information is stored securely using password-protected devices and systems.

Appropriate technical and organisational measures are used to protect information against unauthorised access, loss, misuse or disclosure. Information is retained only for as long as necessary. Counselling records are generally retained for 7 years after the end of therapy, after which they are securely destroyed unless there is a legal or professional reason requiring longer retention.

Sharing Information

Your information will not be shared with third parties unless:

You have provided consent
It is necessary to protect you or another person from serious harm
There is a safeguarding concern involving a child or vulnerable adult
Disclosure is required by law
Disclosure is required by a court order
Disclosure is necessary to prevent serious crime

Clinical Supervision

As part of professional practice, I regularly discuss client work with a qualified clinical supervisor.

Information shared in supervision is anonymised wherever possible. Supervisors are bound by professional confidentiality and data protection obligations.

Legal Obligations

In rare circumstances I may be legally required to disclose information, including matters relating to:

Terrorism
Money laundering
Drug trafficking
Court proceedings
Safeguarding concerns

Where possible, I will discuss disclosure with you before information is shared.

Legal Obligations

In rare circumstances I may be legally required to disclose information, including matters relating to:

Terrorism
Money laundering
Drug trafficking
Court proceedings
Safeguarding concerns

Where possible, I will discuss disclosure with you before information is shared.

International Transfers

I do not routinely transfer personal data outside the United Kingdom. If it becomes necessary to use services that involve international data transfers, appropriate safeguards required under UK GDPR will be implemented.

Automated Decision Making

I do not use automated decision-making or profiling in relation to your personal information.

Personal Data Breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, I will comply with my obligations under UK GDPR, including notifying the Information Commissioner's Office (ICO) and affected individuals where required.

Data Protection Complaints Procedure

If you have concerns about how I collect, use or store your personal information, I encourage you to raise them with me first.

Making a Complaint

You can submit a complaint by contacting:

Abbey Brocklehurst Email: abbey@therapywithabbey.co.uk

Please provide as much information as possible regarding your concern.

What Happens Next

I will:

Acknowledge your complaint within 7 working days
Investigate the matter fairly and impartially
Respond in writing, usually within 30 days
Explain any action taken as a result of the complaint

If additional time is required, I will inform you and explain the reasons.

Escalating a Complaint

If you remain dissatisfied, you have the right to complain to the Information Commissioner's Office (ICO).

The ICO can be contacted via:

Website: https://ico.org.uk/make-a-complaint/

Telephone: 0303 123 1113

Your rights

Under UK GDPR you have the right to:

Be informed about how your information is used
Access the personal information I hold about you
Request correction of inaccurate information
Request erasure of information in certain circumstances
Restrict processing in certain circumstances
Object to processing where applicable
Request transfer of your information to another provider where applicable
Withdraw consent where consent is relied upon
Object to automated decision-making and profiling

Please note that some records may need to be retained to comply with legal, ethical, insurance or professional obligations and may therefore be exempt from deletion requests.

Contact me

Questions, comments and requests regarding this privacy notice, policies and procedures around privacy and confidentiality are welcomed and should be addressed to me by email on abbey@therapywithabbey.co.uk

This privacy policy was first created on 10th December 2024 and last updated 18th June 2026.

Therapy with Abbey