Privacy Notice

Christine Wells trading as Directions Counselling.

This Privacy Notice sets out how I, Christine Wells, a self-employed counsellor, collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy will be reviewed periodically and updated as required to comply with changes in the law or professional practice.

1. Who I Am

I provide confidential counselling and psychotherapy services as a self-employed practitioner trading as Directions Counselling. For the purpose of data protection legislation, I am the "data controller" of your personal data.

2. What Information I Collect

I may collect and process the following information:

  • Your full name, date of birth and contact details (e.g., phone number, email, address)
  • Emergency contact and GP details
  • Relevant medical and mental health history
  • Session notes and communications
  • Payment and billing details
  • Any other information you choose to provide that is relevant to your therapy

I use different methods to collect your personal data including:

  • In the process of providing therapy to you
  • When I communicate with you by email or other electronic correspondence, by telephone or using video conferencing software
  • When you use my website, for example when you submit a form.

3. How I Use Your Information

I use your personal data to:

  • Provide and manage counselling services
  • Communicate with you regarding appointments and services
  • Keep and maintain clinical records in line with professional standards
  • For safeguarding and legal compliance
  • Maintain my accounts and financial records
  • Comply with legal and regulatory obligations

4. Legal Basis for Processing

Under the UK GDPR, the lawful bases I rely on for processing this information are:

  • Legitimate interests (to provide a safe and effective counselling service)
  • Performance of a contract (for the provision of counselling services)
  • Legal obligation (to comply with regulatory or professional requirements)
  • Consent (where applicable, such as sharing with your GP)
  • Provision of health care (special category data under Article 9(2)(h)).

5. How I Store Your Information

Your information is securely stored in the UK or European Union.

I may use:

  • Digital systems with password protection
  • Secure paper files kept in a locked cabinet

I keep your records for 5 years from the date of your last session, in line with the guidance from professional bodies and insurers. After this period, your data will be securely destroyed unless required for legal reasons.

6. Sharing Your Information

Your information is kept confidential. I will only share it:

  • With your explicit consent (e.g., with your GP or another healthcare provider)
  • If required by law or court order
  • To prevent serious harm to you or others
  • With my professional supervisor (in anonymised form)

I will not share your information for marketing or third-party commercial purposes.

7. Your Data Protection Rights

Under UK GDPR, you have rights including:

  • Request access to your personal data (commonly known as a "subject access request"). This enables you to receive a copy of the personal data I hold about you and to check that I am lawfully processing it.
  • Request correction of the personal data that I hold about you. This enables you to have any incomplete or inaccurate data I hold about you corrected, though I may need to verify the accuracy of the new data you provide to me.
  • Request erasure of your personal data in certain circumstances. This enables you to ask me to delete or remove personal data where there is no good reason for me continuing to process it. You also have the right to ask me to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where I may have processed your information unlawfully or where I am required to erase your personal data to comply with law. Note, however, that I may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
  • Object to the processing of your personal data where I am relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data (including carrying out profiling based on my legitimate interests). In some cases, I may demonstrate that I have compelling legitimate grounds to process your information which override your right to object.
  • You also have the absolute right to object any time to the processing of your personal data for direct marketing purposes.
  • Request the transfer of your personal data to you or to a third party. I will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for me to use or where I used the information to perform a contract with you.
  • Withdraw consent at any time where I am relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, I may not be able to provide certain services to you. I will advise you if this is the case at the time you withdraw your consent.
  • Request restriction of processing of your personal data.

If you wish to exercise any of the rights set out above, please contact me. See Contact details (paragraph 9).

You are not required to pay any charge for exercising your rights. If you make a request, I will respond within one month.

I may need to request specific information from you to help me confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).  This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. I may also contact you to ask you for further information in relation to your request to speed up my response.

8. How to Complain

If you have any concerns about my use of your data, please contact me in the first instance.

You can also complain to the Information Commissioner’s Office (ICO):

9. Contact Details

Christine Wells trading a Directions Counselling.

Email: christine.wells@directionscounselling.co.uk

Telephone: 07866 137 823.

Website: https://www.directionscounselling.co.uk