Privacy Statement – Zoe Kelly Counselling

Your privacy is extremely important to me. This statement explains how I collect, use, store, and protect your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I Am

I am Zoe Kelly, a Counsellor/Psychotherapist in private practice. I am registered with the BACP and committed to maintaining the confidentiality and security of your personal information.

2. What Information I Collect

To provide counselling services, I may collect:

Contact details – name, address, phone number, email.

Personal history – relevant background information you choose to share.

Session notes – brief factual notes to support our work together.

Administrative information – invoices, payment records.

3. How I Use Your Information

Your information is used only to:

Arrange and deliver counselling sessions.

Maintain appropriate records as required by my professional body and insurance.

Communicate with you about appointments or relevant matters.

Comply with legal or regulatory obligations.

4. Lawful Basis for Processing

Under UK GDPR, I process your personal data on the following lawful bases:

Contract – to provide the counselling service you have requested.

Legitimate interests – to maintain records for professional purposes.

Legal obligation – where required by law (e.g., safeguarding concerns).

5. Confidentiality and When It May Be Broken

Everything you share is treated in strict confidence. I will only break confidentiality if:

You give explicit consent for me to share information.

I am required by law (e.g., court order).

There is a serious risk of harm to yourself or others.

There are safeguarding concerns involving a child or vulnerable adult.

6. How I Store Your Information

Paper notes are stored in a locked cabinet.

Electronic records are stored on password-protected devices.

I retain records for 7 years after our work ends, after which they are securely destroyed.

7. Your Rights

You have the right to:

Access the personal data I hold about you.

Request corrections to inaccurate information.

Request deletion of your data (in certain circumstances).

Restrict or object to how your data is processed.

Lodge a complaint with the Information Commissioner’s Office (ICO) if you are concerned about how your data is handled.

8. Contact

If you have any questions about this privacy statement or your data, please contact me on the address detailed on the contract.

Note: This privacy statement may be updated from time to time to reflect changes in legislation or practice.