Privacy Policy

Privacy Statement

Records & Data Protection (Privacy Notice)
I am registered with the Information Commissioner’s Office (ICO) and comply with UK GDPR. I am the data controller responsible for your personal information. If you have any questions about this notice, you can contact me at: lisa@safeharbourcounselling.uk
Personal Data Collected
- Name, contact details, date of birth
- GP and emergency contact details
- Assessment information
- Session notes and correspondence
Purpose of Processing
- To provide counselling services
- To manage appointments and communication

Data Usage and Legal Basis

Lawful Basis for Processing
I process your personal data under:
• Article 6(1)(b) – provision of a contract (counselling services)
• Article 9(2)(h) – provision of health care (special category data)
Storage & Security
- Electronic records are password-protected
- Paper records are stored in locked cabinets
- Reasonable steps taken to protect data
Data Retention
Records are retained securely for 5 years after counselling ends, in line with professional and insurance requirements, after which they are safely destroyed.
Sharing Information
Personal data is not shared without consent unless there is a risk of serious harm or safeguarding concerns. Supervision is anonymised.

Rights and Digital Communications

Your Rights
- Withdraw consent
- Raise concerns with the ICO
- Access to Data (Subject Access Request)
Social Media
To protect confidentiality, I do not accept friend requests from clients. I do not search for client profiles unless for safeguarding.
Online Therapy
Sessions are via Therasee. Technology is used to ensure safe practice in line with the BACP Framework. Privacy in digital work requires a secure space and device.
Supervision
I undertake regular supervision as a BACP member; all shared info is anonymised.
Emergencies
Online counselling is not for crisis. In emergencies, contact your GP, 111, or 999.