GDPR Policy
My Commitment to Your Privacy
Trust is at the heart of our therapeutic relationship. When you share personal information with me, I treat it with the same care and respect I bring to our work together. Protecting your privacy isn't just a legal requirement — it's fundamental to creating a safe space where you can speak openly. This statement explains what information I collect, why I need it, and how I keep it safe.
What Information I Collect
To provide therapy and manage our working relationship, I collect and keep:
•Your name and contact details (phone number, email address, postal address)
•Emergency contact information
•Details about what brings you to therapy (your presenting issues)
•Brief, anonymised session notes recording our work together
•Relevant medical or health history you share with me
•Payment information and records
Why I Collect This Information
I have a legal basis for processing your personal data under UK data protection law:For general personal data: I rely on Article 6(1)(b) UK GDPR — processing is necessary for the performance of the therapeutic contract between us. In plain terms, I need your contact details and session information to provide the therapy service you've asked for.For health-related information: Because therapy involves sensitive health data, I rely on Article 9(2)(h) UK GDPR — processing is necessary for the provision of health or social care treatment by a health professional. The additional condition under DPA 2018 Schedule 1, Part 1, paragraph 2 (health or social care) also applies. This recognises that as a qualified therapist, I'm subject to a professional duty of confidentiality.
Professional Supervision - As part of maintaining high professional standards, I discuss my clinical work in supervision with a qualified clinical supervisor. This is essential for ensuring you receive safe, effective therapy.Your identity is always protected. I do not share your name or any identifying details with my supervisor. All case discussion uses anonymised material only — my supervisor will never know who you are. My supervisor is bound by their own professional body's confidentiality requirements.
Clinical Will Arrangements
I have a clinical will in place to ensure your records are handled appropriately in the unlikely event I become unable to continue practising (for example, due to serious illness or death). If I am unable to practice, and only in this event, your name and contact details will be accessed by my colleagues in Arbour Counselling My Clinical Will Executors are Laura Odom (email: Lauraodomtherapy@gmail.com) and Kate Pegg (email: hello@katepeggcounselling.co.uk). They will use these details to contact you only to inform you that I am unable to continue therapy with you. My colleagues are both members of the BACP and as such work within the BACP ethical framework, which includes confidentiality.
Who Else May See Your Information
Beyond myself, the following people or services may have limited access to your information:
•Clinical supervisor — anonymised case material only, as described above.
•Employee Assistance Programme (EAP) or referral platform — if you were referred through your employer's EAP or another referral service, I may share limited information with them as part of the commissioning arrangement (for example, confirming attendance or number of sessions).
•Website and technology providers — this website runs on Wix and Hostinger which may process some technical data; if we have online sessions, Google Meet processes video and audio data.
•Statutory authorities — only where I am legally required to share information (see below).
When I Might Need to Break Confidentiality
What you share in therapy is confidential. However, there are rare circumstances where I may need to share information without your consent:
•If I believe there is a serious risk of harm to you or someone else
•If there are safeguarding concerns about a child or vulnerable adult
•If ordered to do so by a court of law
Wherever possible, I will discuss this with you first and explain my concerns before taking any action.
How Long I Keep Your Records
I keep your therapy records for 7 years after our last session, in line with the Limitation Act 1980 and standard professional indemnity insurance requirements.If you were under 18 when we worked together, I keep your records until you reach the age of 25, or for 7 years after our last session — whichever is longer. After this time, paper records are shredded, and electronic records are permanently deleted using secure deletion software.
Your Rights
You have rights over your personal information. In straightforward terms, you can
:
•See your records — ask me for a copy of the information I hold about you
•Correct mistakes — ask me to put right anything that's inaccurate
•Request deletion — ask me to delete your records, though I may need to keep some information for legal or insurance purposes
•Restrict processing — ask me to limit how I use your data in certain circumstances
•Object to processing — raise concerns about how I'm using your information
•Data portability — receive your data in a format you can take elsewhereIf you'd like to exercise any of these rights, just get in touch with me directly.
Making a Complaint
If you're unhappy about how I've handled your personal information, I'd encourage you to contact me first so I can try to resolve your concerns:Email: info@albacounselling.org . Under the Data (Use and Access) Act 2025, you also have the right to complain directly to the Information Commissioner's Office (ICO):Website: ico.org.uk. Telephone: 0303 123 1113
Cinzia Procter
Alba Counselling & Psychotherapy.
Legal Entity: Alba Counselling and Psychotherapy is a trading name of Cinzia Procter Counselling and Psychotherapy Ltd; a company registered in England and Wales (Company Number 169651250). All counselling and psychotherapy services are provided by Cinzia Procter Counselling and Psychotherapy Ltd.