Privacy Policy
Last updated: 12/06/2026.
Alba Counselling and Psychotherapy ('I', 'we,' 'our,' or 'us') is committed to protecting your privacy. This policy explains how we collect, use, store, and share your personal information when you use our website https://www.albacounselling.org/ and our counselling services.
1. Who we are
We are Alba Counselling and Psychotherapy, a counselling service based in the UK. For the purposes of data protection law, we are the 'data controller' of your personal information.
Legal Entity: Alba Counselling and Psychotherapy is a trading name of Cinzia Procter Counselling and Psychotherapy Ltd; a company registered in England and Wales (Company Number 169651250). All counselling and psychotherapy services are provided by Cinzia Procter Counselling and Psychotherapy Ltd.
Our contact details:
-
Email: info@albacounselling.org
-
Phone: 07901 593 897
-
Address: Suite 1, Regent House, 15 Hawthorn Road, Leeds, LS7 4PH
2. Information we collect
We may collect and process the following types of personal information:
-
Identity data: name, date of birth, gender.
-
Contact details: phone number, email address, postal address.
-
Health information: details relevant to your mental health and wellbeing (special category data).
-
Session notes: records of counselling sessions where necessary.
-
Website usage data: IP address, browser type, and cookies (see our Cookie Policy).
Important: Your health and therapy-related information is classified as 'special category data' under Article 9(1) of the UK GDPR. This means it receives enhanced legal protection, and I can only process it under specific conditions set out in law.
3. How we collect your information
-
When you contact us via email, phone, or contact form.
-
When you register for counselling sessions.
-
When you visit our website.
-
From third parties if you are referred by a GP, EAP, health professional, or other service (with your consent).
-
If you contact us via the website, we will use the information you provide only to respond to your enquiry and determine whether we are able to offer counselling services.
4. Lawful basis for processing
We process your personal data under the following lawful bases:
Enquiries about therapy:
If you contact us to enquire about counselling services (for example by email, telephone or through the website contact form), we process the personal information you provide in order to respond to your enquiry and determine whether I am able to offer an appropriate service. This processing is carried out under Article 6 (1) f UK GDPR- Legitimate Interests, as it is necessary to respond to requests for information about our counselling services.
Article 6 basis (general personal data):
We rely on Article 6(1)(b) UK GDPR — processing is necessary for the performance of the therapeutic contract between us. When you engage me as your therapist, we enter into a contract for me to provide therapy services. Processing your personal data is essential for me to fulfil that contract.
Article 9 basis (special category health data):
We rely on Article 9(2)(h) UK GDPR — processing is necessary for the provision of health or social care treatment by a health professional. As a qualified counsellor/psychotherapist bound by professional confidentiality obligations, I am permitted to process your health information for the purpose of providing your therapy.
The additional condition required under UK law is found in DPA 2018 Schedule 1, Part 1, paragraph 2 (health or social care purposes).
The data is collected by the following ways:
-
When you first contact me to enquire about therapy (by phone, email, or through the website contact form)
-
During your initial consultation or intake session
-
Throughout our ongoing therapy sessions
-
Via email, telephone, or video call communications between sessions
-
Through any forms or questionnaires you complete as part of your therapy
5. How we use your information
We use your information to:
Provide counselling and related services.
-
Communicate with you regarding appointments and enquiries.
-
Keep accurate records in line with professional and legal requirements.
-
Improve our website and services.
6. Who we share your data with
I treat your information as confidential and do not share it without good reason. However, the following parties may have access to your data in limited circumstances:
Clinical supervisor: As explained below I discuss my therapeutic work in supervision using anonymised case material only. Your name and identifying details are not shared.
EAP or referral platform: Where you have been referred to me through an Employee Assistance Programme or similar referral arrangement, I may share limited information with the commissioning organisation as part of that arrangement. This is typically limited to confirming attendance and session count, not the content of our sessions. The specific information shared will be explained to you at the outset of therapy.
7. Professional obligations and supervision
I am required by the BACP to attend regular clinical supervision. Supervision is an essential part of ethical therapeutic practice — it helps me reflect on my work and ensures I am providing you with the best possible care.
When I discuss my therapeutic work with my supervisor:
-
Your name and any identifying details are not shared with my supervisor
-
I use anonymised or pseudonymised case material only
-
My supervisor is a qualified professional bound by the same confidentiality obligations as I am
-
My supervisor is bound by their own professional body's ethical framework
Supervision discussions are focused on the therapeutic process and my professional development, not on identifying individual clients.
8. Clinical will — what happens to your records if I am unable to practise
I have a clinical will in place to ensure your records are handled appropriately in the unlikely event I become unable to continue practising (for example, due to serious illness or death). If I am unable to practice, and only in this event, your name and contact details will be accessed by my colleagues in Arbour Counselling. My Clinical Will Executors are Laura Odom (email: Lauraodomtherapy@gmail.com) and Kate Pegg (email: hello@katepeggcounselling.co.uk). They will use these details to contact you only to inform you that I am unable to continue therapy with you. The clinical will ensures that a nominated colleague (also bound by professional confidentiality) can securely manage or destroy records and, where appropriate, contact clients to offer support or referral.
9. Third-party service providers: I use the following third-party services which may process your data:
-
Hostinger — this website is hosted by Hostinger, which may process certain technical data
-
Wix — this website is built on Wix, which may collect certain technical data about visitors including basic analytics
-
Google Meet and WhatsApp — used for video therapy sessions where agreed
Each of these services is bound by a data processing agreement. Links to their privacy policies are available below.
I never sell or rent your personal data.
10. International data transfers
Some of the third-party providers I use to deliver my services, including Wix (website hosting), Hostinger (web hosting services), WhatsApp (communications) and Google Meet (video consultations), may process or store personal data outside the UK. Where this occurs, those providers rely on recognised data transfer mechanisms and appropriate safeguards, such as UK adequacy regulations or Standard Contractual Clauses, to protect personal information
-
Wix (Wix.com, Israel)
-
Hostinger (Hostinger International, Ltd, Lithuania)
-
WhatsApp (Meta Platforms,Inc)
-
Google Meet (Google LLC Part of Alphabet Inc)
Where personal data is transferred outside the UK, I ensure that appropriate safeguards are in place in accordance with UK GDPR. Depending on the provider and destination country, this may include UK adequacy regulations, participation in the UK Extension to the EU-US Data Privacy Framework, or the use of International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs), as appropriate.
For further information about how these providers process personal data, please refer to their own privacy policies:
11. Data retention
Please see my separate data retention policy on my website.
12. Your rights
Under UK data protection law, you have the right to:
-
Access a copy of your personal data.
-
Correct inaccurate or incomplete data.
-
Request deletion of your data (subject to professional/legal obligations).
-
Restrict or object to processing in certain circumstances.
-
Data portability (in certain cases).
-
Withdraw consent at any time (where processing is based on consent).
13. Complaints
To exercise your rights, or if you have any concerns about how your data has been handled, please contact us first at info@albacounselling.org so we have the opportunity to resolve the matter. We will respond within 30 days of receipt. If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO) : www.ico.org.uk.
13. Security
We take appropriate technical and organisational measures to protect your personal information from loss, misuse, or unauthorised access.
14. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated 'last updated' date.