Privacy policy.

Privacy Policy

Business Name: Lynn Walker Counselling

Data Controller: Lynn Walker

Contact Email: lynnwalkercounselling@gmail.com

ICO Registered

1. Introduction

I am committed to protecting your privacy and handling your personal data with care. As a member of the National Counselling & Psychotherapy Society (NCPS), I abide by their Code of Ethics. This policy explains how I collect, use, and store your information in accordance with the UK General Data Protection Regulation (UK GDPR). 

2. The Data I Collect

I collect the following information to provide safe and ethical counselling:

• Contact Details: Name, address, phone number, and email.

• Emergency Contact: Name and number of a person to contact in a crisis.

• Sensitive Information: Brief session notes, GP details, medical history relevant to therapy, and any mental health assessments. 

3. Lawful Basis for Processing

Under GDPR, I process your data under the following legal bases:

• Contract: To provide the counselling service you have requested.

• Legitimate Interests: To maintain records for insurance and professional standards.

• Special Category Data: I process health data under the condition of providing healthcare or social care (Article 9).

4. How I Store Your Data

I use a "dual-system" for record-keeping to ensure maximum security:

• Physical Records: Any handwritten notes or signed contracts are kept in a locked metal filing cabinet. I am the only individual with key access to this cabinet.

• Electronic Records: Digital data (such as contact forms or typed summaries) is stored on a dedicated external hard drive. This drive is kept offline when not in use and is [password-protected/encrypted]. No client data is stored on my computer's primary internal hard drive or in "the cloud."

6. Data Retention

In accordance with the requirements set by my insurer, Balens, I retain your records for a period of seven years following the end of our work together. After this timeframe, paper records are destroyed via cross-cut shredding and digital files are permanently deleted from the external