Privacy Policy

In order to provide counselling services, I need to hold personal contact details and records relating to counselling sessions. This Privacy Notice explains how I collect, store and use your personal information from the initial point of contact through to after counselling has ended.

I offer counselling to adults and young people aged 11–18. This Privacy Notice applies to personal data collected and processed in relation to counselling services.

Your privacy is very important to me and you can be confident that your personal information will be kept safe and secure and will only be used for the purpose for which it was provided.

I adhere to current data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003. I also adhere to the ethical guidelines regarding privacy, confidentiality and record-keeping set out by the British Association for Counselling and Psychotherapy (BACP). The UK GDPR requires that I have a lawful basis for processing your personal data.

If you are currently attending counselling, or if you are in contact with me to consider working together, I process your personal data because it is necessary for the performance of our contract. Some of the information you share with me may be classed as special category personal data, including information about your physical or mental health. I process this information because it is necessary for the provision of counselling services. Once counselling has ended, I may retain and process certain information where necessary for my legitimate interests, including meeting professional, insurance, legal and regulatory requirements.

How I use your information

I will never use your personal data for any purposes other than the administration and provision of counselling services, for example arranging session times. I only retain personal information for as long as is necessary and in line with legal, regulatory and professional guidance.

Initial contact

When you contact me to make an enquiry or to book an initial chat, I collect brief information to help me respond. This usually includes your name and a contact method such as an email address or phone number so that I can arrange the appointment and send joining details.

Sometimes an organisation such as an employer may send me your details when making a referral, or a relative may contact me on your behalf. Enquiry information from individuals who do not proceed to counselling is normally deleted within 12 months.

While you are attending counselling

Your email address may be used to confirm appointments or to contact you if we need to rearrange a session, where you have consented to this. Appointment reminders may also be sent using your email address. Sessions usually take place online via Teams. If you do not join a scheduled session, I may initially contact you by email. We may also agree in advance that I can contact you by telephone. If you do not wish me to do this, please let me know.

Before our first session, I will send you an intake form requesting personal details such as your name, address, date of birth, contact details, and contact details for your GP and an emergency contact. This information is stored securely within my clinical practice management system and is password protected.

I will only contact your GP or emergency contact if it is necessary to fulfil my duty of care, and wherever possible this would be discussed with you beforehand.

Almost everything discussed in sessions is confidential. There are situations where I may need to break confidentiality, such as if there is a serious risk of harm to you or others, certain serious criminal disclosures, or if I am legally required to disclose information by a court order. I would aim to discuss this with you wherever possible. There are exceptions, for example in some safeguarding situations.

Records and notes

My records include basic contact information and brief, factual session details. Notes are for my use only and do not include unnecessary identifying personal details. Personal details and notes are stored separately and are password protected.

I attend regular clinical supervision, where anonymised themes from my work may be discussed. My supervisor is bound by professional confidentiality and the BACP Ethical Framework.

I also have a clinical will in place. This sets out arrangements for the secure handling of client records in the event of my incapacity or death, in line with ethical and legal requirements. I am registered with the Information Commissioner’s Office. You have the right to request a copy of the personal data I hold about you, and I will respond within one month.

After counselling has ended

There are professional and legal reasons why records must be retained after work has ended, including regulatory, insurance and accounting requirements.

Counselling records and session notes are stored securely for a period of five years after counselling has ended, in line with my professional insurance requirements. Where counselling has been provided to a child or young person under the age of 18, records will be retained for five years after their 18th birthday. After the relevant retention period has expired, records will be securely deleted.

Personal details forms are deleted at the end of counselling, aside from a minimal record required to identify archived notes if necessary.

Third party recipients of personal data

I share a limited amount of personal data with third parties only where necessary to provide services or meet legal obligations. For example, I use Docusign to distribute counselling contracts and intake forms. I may also share limited financial information with my accountant for invoicing and accounting purposes.

Some service providers that I use may process data outside the UK. Where this occurs, I take reasonable steps to ensure that appropriate safeguards are in place and that data is handled in accordance with UK data protection law. Where I work with external suppliers, they are required to use your information only for the task for which they have been contracted.

If your sessions are funded or arranged by a third party such as an employer, only attendance information is shared for invoicing purposes. Session content remains confidential unless you give written consent. I never share personal data for marketing, sales or research purposes.

Data security

I take data security seriously. My email account, devices and online storage systems are password protected and use appropriate security measures. Emails are deleted within a reasonable period unless it is necessary to retain them.

Website visitors

By accessing www.la-counselling.co.uk, certain information may be collected and processed as described in this Privacy Notice. If you use the website contact form, the information you provide is sent to me by email and is not stored on the website. Emails are transmitted securely using encryption.

The website uses cookies and Google Analytics to collect anonymous information about website usage, such as page views and visitor numbers. This helps improve the website. Some embedded content, such as Google Maps, may also use cookies. I do not control these cookies. You can opt out of Google Analytics via Google’s opt-out tools.

Your rights

Under GDPR you have the right to access the personal information I hold about you, to request corrections, to request deletion, to restrict processing, or to object to processing in certain circumstances. If you wish to exercise any of these rights, please contact me in writing at lucy@la-counselling.co.uk. In some situations I may not be able to comply, for example where records must be retained by law. More information about your rights is available at ico.org.uk/your-data-matters.

Queries and complaints

The data controller is Lucy Wright. I am registered with the Information Commissioner’s Office under Lucy Amelia Counselling, registration number ZB745004. If you have questions about this privacy notice or how I handle personal data, you can contact me at lucy@la-counselling.co.uk.

If you have concerns about how I have handled your personal data, please contact me in the first instance at lucy@la-counselling.co.uk. I will acknowledge your complaint within 30 days and aim to resolve it without undue delay. If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO).

This privacy notice may be updated from time to time (last updated June 2026). Please check occasionally for any updates.