Privacy Policy & Your Data

Last Updated: August 2026

When you come to counselling, sharing your story takes trust. Protecting the privacy of that story and your personal details is incredibly important to me.

As a member of the British Association for Counselling and Psychotherapy (BACP), I follow strict ethical rules alongside UK data protection laws (UK GDPR) to keep your information safe. This page explains exactly what happens to your details when you use my website or start therapy with me.

1. What Information Do I Collect?

  • Your Contact Details: When you use my contact form or email me, I collect your name, gender, email, and phone number so I can reply to you.

  • Website Cookies: My website uses basic cookies to understand how visitors use the site (like which pages are popular) so I can make it easier to navigate.

  • Session Notes: Once we begin working together, I keep brief, factual notes about our sessions. These help me track our progress and remember important details of your journey.

  • Health Information: Relevant medical or mental health details that you choose to share during counselling sessions.

  • Payment Information: Billing details (processed securely through third-party providers where applicable).

2. Where and How Is Your Information Kept?

  • Kept Separate: Your contact details (like your name and phone number) are stored completely separately from your session notes.

  • Highly Secure: Any digital notes are password-protected and encrypted. Any paper notes are kept in a securely locked filing cabinet.

  • No Names: I use initials or a code number on your session notes, so your name is never attached directly to what we talk about.

3. Is Our Work Together Confidential?

Yes, what you share in our sessions is private. However, there are a few strict, professional exceptions to this:

  • Supervision: To make sure I am giving you the best possible care, the BACP requires me to discuss my work with a qualified supervisor. When I do this, your identity is completely protected—I use pseudonyms and never share your real name or identifying details.

  • Safety Concerns: If I am seriously concerned that you or someone else is at risk of severe harm, I may need to speak to an outside professional (like your GP). I would always try to talk to you about this first.

  • Legal Requirements: Very rarely, a court of law might legally order me to share information, or a law regarding something severe (like terrorism or money laundering) might require it.

4. How Long Do I Keep Your Details?

If you just enquire: If you reach out but decide not to start therapy, I delete your contact details after one month.

  • If we work together: To meet the requirements of my professional insurance, I keep your session notes securely for usually 6 to 7 years after our final session. After this time, they are permanently and securely destroyed.

  • For Financial Records: I retain your financial records for 6 years and it is for tax purposes.

5. Legal Basis for Processing?

I process personal data under the following legal bases:

  • By Using a Contract: To provide counselling services you have requested.

  • By Legal Obligation: To comply with tax, accounting, and safeguarding laws.

  • By Vital Interests: If there is a risk of serious harm to yourself or others.

  • By Consent: For storing sensitive health-related information and optional communications.

6. Your Rights

Even though I hold this data, it belongs to you. You have the right to ask to see the information I hold about you, or to ask me to correct something if it is wrong.
(Please note: Because I am legally required by my insurance to keep clinical notes for a set number of years, I cannot delete your session notes early, but I can delete your website enquiry details upon request).

7. Questions or Concerns?
If you have any questions about how your data is handled, please feel free to ask me during a session or email me at paolawalker690@gmail.com

My practice is registered with the Information Commissioner’s Office (ICO), which is the UK’s data protection watchdog, under number ZC211933. If you ever feel your privacy wasn’t respected, you have the right to contact them directly.