Last updated: 06/03/2026

I take your privacy and data protection seriously. This Privacy Policy explains what personal information I collect, how I use it, how it is stored, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. I am registered with the ICO as I handle personal data as part of my business.

Data controller:

Name: Hannah Purdie

Email: hannahpurdiecounselling@gmail.com

The type of personal information I collect:

I may collect and process the following personal information:

Personal identifiers and contact details

• Name
• Email address
• Phone number
• Home address (only for emergency purposes)

Therapeutic information (special category data)

• Clinical notes
• Information you share during assessment or therapy
• Relevant background information needed for counselling

How I get the information and why I have it:

The personal information I process is provided to me directly by you for the following reasons: 

• Communication to arrange counselling appointments and share documents relating to these appointments
• Maintain records of counselling sessions
• Emergency intervention: I may need to know your address in order to inform emergency services should I believe you need an urgent wellness check

I receive personal information directly from you when you: 

• Contact me to enquire about counselling
• Complete forms, assessments, or client agreements
• Attend counselling sessions online
• Provide information in written or verbal communication

Why I Collect Your Information and Lawful Bases for Processing

I collect and use your information for the following purposes:

a. To communicate with you and manage appointments

Lawful basis:

• Consent (Article 6(1)(a))
  You can withdraw your consent at any time by contacting me by email

b. To provide counselling and maintain clinical records

Lawful basis:

• Legitimate Interests (Article 6(1)(f)): delivering a safe and effective therapeutic service
• Special category data condition:
  • Provision of health or social care (Article 9(2)(h))

c. For safety and emergency intervention

If I believe you or someone else is at risk of serious harm, I may process or disclose your address or other necessary information.
Lawful basis:

• Vital Interests (Article 6(1)(d) and Article 9(2)(c))

How I store and protect your personal information

• Your data is stored electronically in encrypted, password-protected cloud storage.
• No paper records are kept.
• Emails are stored securely via my email provider, which uses encryption.
• Clinical notes are stored separately from identifying information.

Retention Period

I keep clinical records and identifying information for 7 years after counselling ends, in line with professional guidance and insurance requirements.

After this period, all personal data is securely deleted.

When I May Need to Share Information

I do not share your data with third parties except in the following limited circumstances:

• Emergency services, where I believe there is significant risk of harm
• Professional supervision, where information is anonymised and no identifying data is shared
• Legal requirements, if I am ordered to disclose information by a court

I never sell your data or share it for marketing.

Your data protection rights

Under data protection law you have rights including:

• Right of access - you can ask me for copies of your personal information
• Right to rectification- you can ask me to rectify your personal information that you think is inaccurate and complete information you think is incomplete
• Right to erasure- you have the right to ask me to erase your personal information in certain circumstances
• Right to restriction of processing - you can ask me to restrict the processing of your personal information in certain circumstances
• Right to object to processing - you have the right to object to the processing of your personal information in certain circumstances
• Right to data portability- you have the right to ask that I transfer the personal information you gave me to another organisation or to you in certain circumstances

You do not need to pay a fee to exercise your rights. I will respond within one month.

To make a request, please contact me at:

hannahpurdiecounselling@gmail.com 

How to complain

If you have any concerns about my use of your personal information, you can make a complaint to me at hannahpurdiecounselling@gmail.com 

You can also complain to the ICO if you are unhappy with how I have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane 

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: www.ico.org.uk