Privacy Notice

GDPR & Data Protection Policy

Your privacy is very important to me and you can be confident that your personal information will be kept safe and secure and will only be used for the purpose it was given to me. I adhere to current data protection legislation, including the General Data Protection Regulation (EU/2016/679) (the GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003. This privacy notice tells you what I will do with your personal information from initial point of contact through to after your therapy has ended. 

1. Data Controller

‘Data controller’ is the term used to describe the person / organisation that collects and stores and has responsibility for people’s personal data. In this instance, I am the sole data controller for Solace Therapy. I am registered with the Information Commissioner’s Office (Registration Number: ZC095940). 

2. What Information I Collect

When you contact me or begin counselling, I may collect:

• Your name and contact details

• Emergency contact information

• Relevant health or background information that you choose to share

• Notes from our sessions (kept securely and confidentially)

• Invoicing or payment information (if applicable)

​3. Why I Collect This Information

Your data is collected for the purpose of delivering safe, ethical, and effective counselling. It helps me to respond to your enquiries, provide appropriate therapeutic support, maintain secure client records, fulfil my legal, ethical and professional obligations. 

​​4. How Your Information Is Stored

I take the security of the data I hold about you very seriously and as such I take every effort to make sure it is kept secure. All data is stored securely, whether in electronic or paper format. I use encrypted devices and secure platforms for any digital communication or documentation.

​​​5. How Long I Keep Your Data

Client records are kept for a period of 7 years after the end of therapy, in line with guidance from professional bodies such as the BACP. After this period, records are securely destroyed.

​6. Sharing of Data

Your information will never be sold or shared for marketing purposes. I will not share your data with any third party unless:

• You give explicit consent

• I am legally required to do so

• There is a safeguarding concern and it is my duty of care

​7. Your Rights

Under the UK GDPR, you have the right to: 

• Access your data

• Request corrections

• Request erasure (in some circumstances)

• Withdraw consent (where applicable)

• Lodge a complaint with the ICO if you believe your data has been mishandled

​​8. Use of Website and Cookies

This website may use basic cookies to enhance the browsing experience. These do not collect identifying information and can be controlled through your browser settings.

​Contact

I am happy to chat through any questions you might have about my data protection policy or your data. You can contact me via email at jen@solace-therapy.com 

This policy may be updated periodically to reflect changes in data protection practices.