1. Introduction
Your privacy and confidentiality are taken seriously within this practice.

This policy explains how personal information is collected, used and protected as part of my work as a private psychotherapist. All personal data is handled with care, discretion and respect, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the British Association for Counselling and Psychotherapy (BACP) Ethical Framework.

2. About This Practice
I work as an independent psychotherapy practitioner and act as the Data Controller for the personal information I hold.

If you have any questions about this policy or how your information is managed, you are welcome to contact me using the details below.

Name: Amy Cullen
Email: amy@happierinhealth.co.uk
Phone: 07584 252550

3. Personal Information Collected
I collect only the information necessary to provide therapy safely, ethically and professionally. This may include:

- Name
- Date of birth
- Address
- Email address
- Telephone number
- Emergency contact details

No unnecessary or excessive personal data is collected.

4. How Information Is Collected
‍Personal information is provided directly by you:

- When making an enquiry
- When completing intake or consent documentation
- Via email or telephone communication
- During therapy sessions5. How Information Is UsedYour information is used solely for purposes connected with your therapeutic care, including:

- Providing psychotherapy
- Managing appointments and communication
- Supporting safeguarding and emergency procedures
- Meeting professional, ethical and legal obligations6. Therapy NotesBrief therapy notes are kept to support reflective, ethical and effective clinical work.

- Notes are anonymised or pseudonymised wherever possible
- Identifying details are stored separately from clinical material
- Notes are concise, factual and clinically relevant
- Fully anonymised material may be discussed in clinical supervision, in line with BACP guidance

7. Lawful Basis for Processing
Personal data is processed under the following lawful bases:

- Performance of a contract (providing psychotherapy services)
- Legal obligation, including safeguarding responsibilities
- Legitimate interests related to the operation of a professional psychotherapy practice
- Explicit consent, where required

Health information is treated as special category data and is processed only for the purpose of providing therapeutic care.

8. Storage and Security
‍Appropriate measures are taken to protect personal information, including:

- Secure, password-protected digital systems
- Restricted access to personal data
- Careful handling of electronic communications
- Ongoing review of data protection practices

9. Data Retention
Client records are normally retained for seven years following the end of therapy, in line with professional insurance requirements, after which they are securely destroyed.

10. Confidentiality and Sharing Information
Your personal information is treated as confidential and is not shared without your consent, except where:

- There is a serious risk of harm to you or others
- Disclosure is required by law
- Safeguarding concerns apply

Any information shared for supervision purposes is fully anonymised.

11. Your Rights
Under UK GDPR, you have the right to:

- Access your personal information
- Request correction of inaccurate information
- Request erasure of information (where applicable)
- Restrict processing
- Withdraw consent (where consent is the lawful basis)
- Raise a concern with the Information Commissioner’s Office (ICO)

12. Website and Online Enquiries
‍If you contact me via the website, your information is used solely to respond to your enquiry and is not shared with third parties. If you do not proceed with therapy, your enquiry information will be securely deleted after a reasonable period.13. CookiesThis website uses essential cookies required for the website to function correctly and securely. These cookies do not collect personally identifiable information and cannot be disabled through this website. No advertising or tracking cookies are currently used.
‍14. Electronic Communication
‍While reasonable steps are taken to protect confidentiality, electronic communication carries inherent risks. Clients are encouraged to consider their own digital security when communicating electronically.

15. Changes to This Policy
‍This policy may be reviewed and updated periodically. The most current version will always be available.

16. Questions or Concerns
‍If you have any questions about how your personal information is handled, you are welcome to contact me directly. You also have the right to contact the Information Commissioner’s Office (ICO).

An application for registration with the Information Commissioner’s Office (ICO) has been submitted. The registration number will be added once it has been issued.