​

This Privacy Policy explains how I collect, use, and protect your personal information in line with UK GDPR and professional ethical standards.

​

1. Information I Collect

When you begin counselling, I may collect:

• Your contact details (name, phone number, email, address).

• Date of birth and emergency contact details.

• Information you share in forms (e.g., background, medical information relevant to counselling).

• Session notes (kept brief and anonymised).

​​

2. Why I Collect This Information

I collect and store information in order to:

• Provide you with safe and effective counselling.

• Keep appropriate records in line with professional standards.

• Contact you about appointments, cancellations, or important updates.

​​​

3. Legal Basis for Processing

• I process your personal data under the following legal bases:

• Contract – to provide counselling services.

• Legitimate interest – to manage my practice effectively.

• Legal obligation – to meet professional and legal requirements.​

I also process special category data (such as health-related information) in order to provide appropriate therapeutic support.

​​

4. How Your Information is Stored

• Paper notes are stored securely behind two physical locks.

• Electronic information is stored securely with password protection and encryption behind two digital locks. 

• Only I have access to your records.

• I may use secure third-party services (such as email providers or invoicing systems) to manage appointments and payments. These services store limited personal information (such as your name and email) and are GDPR compliant.

​

5. How Long Information is Kept

• In line with professional guidelines, records are kept for 7 years after our work ends (or until a young client reaches 25, whichever is longer). After this, records are securely destroyed.

​

6. Confidentiality & Sharing of Information

Your information is confidential. It will only be shared in the following situations:

• If you give consent for me to share with another professional (e.g., GP).

• If there is risk of serious harm to yourself or others.

• If there are safeguarding concerns about a child or vulnerable adult.

• If I am legally required (e.g., by court order).

In supervision, I may discuss my client work to ensure safe and ethical practice. This is always done without identifying you personally.

​

7. Your Rights

Under UK GDPR, you have the right to:

• Access the information I hold about you.

• Request corrections if something is inaccurate.

• Ask for your information to be deleted (in certain circumstances).

• Withdraw consent for me to hold your information, if legally possible.

​​

8. Complaints

• If you have concerns about how your data is handled, please raise them with me in the first instance.

• You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.

​

9. Contact

• If you have any questions about this Privacy Policy or how your information is used, please contact me at:

• ​

Danielle Lemer

The Counselling Studio
dani@thecounsellingstudio.com

​

I am registered with the Information Commissioner’s Office (ICO), registration number: ZC116929

​

Last Updated: April 2026