Privacy Notice & GDPR

This privacy notice provides information about how I, a therapist in private practice, collect and process your personal data in accordance with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

I am committed to protecting your confidentiality and privacy. I am a registered member of the British Association for Counselling and Psychotherapy (BACP) (Membership No. 00975713, Register No. 390183) and abide by their ethical framework. I am also accredited with the national counselling and psychotherapy society (NCPS) (Membership No. NCS18-06313). I am also registered with the Information Commissioner’s Office (ICO), Registration No. ZB321072. Additionally, I am insured with Holistic Insurance.

What Data I Collect and Why

I collect contact information, basic demographic details, and clinical notes to provide effective therapy services. Processing this data is necessary for the performance of our counselling contract and to comply with professional ethical standards.

Children and Young People

Special consideration is given to the privacy of children. I ensure that communication and processing of their data is handled with appropriate safeguards and in a manner that respects their evolving capacity for privacy.

Consent for Data Processing and Counselling

By engaging in therapy, you provide consent for the processing of sensitive personal data (special category data) as required for clinical work. You have the right to withdraw consent at any time, though this may affect the continuation of therapy.

For clients under 16 years old: Written parental or carer consent is required to collect, store, and process personal data. However, a young person under 16 may consent to counselling themselves if they are assessed to be Gillick competent—meaning they have sufficient maturity and understanding to make their own decisions.
For clients aged 16 and over: Young people can provide their own consent for both data processing and counselling unless there are specific reasons that indicate parental involvement is necessary.

How I Store Your Data

All personal data is stored securely. Physical notes are kept in a locked filing cabinet. Phone numbers are stored on my password protected mobile phone. I take all reasonable technical and organisational measures to prevent loss or unauthorised access.

How Long I Keep Your Data

Clinical records are typically kept for a period of up to 7 years after the end of therapy, in line with insurance and professional guideline requirements. After this period, records are securely destroyed.

Freelance Work in Schools

When working within school settings, I operate in accordance with both my private practice policies and the specific safeguarding and data protocols of the educational institution.

Information for Parents and Carers

I provide clear information to parents and carers regarding the nature of the therapy and how their child's information is managed, maintaining a balance between the child's right to confidentiality and the parent's responsibility.

Confidentiality: While therapy is confidential, if there are safeguarding concerns or risks of harm, information may be shared with relevant authorities, including parents or carers.
Progress Updates: General updates can be provided to parents or carers upon request, without breaching the confidentiality of the therapy sessions.

Your Rights Under UK GDPR

You have the right to access your data, request corrections, or ask for the deletion of certain information. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you have concerns about data handling.

Data Sharing & Confidentiality

Confidentiality is fundamental to therapy. Data is only shared when required by law, for safeguarding purposes, or with your explicit consent. I may discuss cases with my clinical supervisor for professional oversight.

Contact Information

For any questions regarding your data or this policy, please contact Grace at therapywithlake@outlook.com.

Last updated: 7 May 2026