Counselling and Psychotherapy in London and online

At Deeper Than Blue Therapy, I am committed to protecting and respecting your privacy. This policy explains how I collect, use, and store your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the BACP Ethical Framework.

1. Who I Am

I am the Data Controller for Deeper Than Blue Therapy. If you have any questions about your data, you can contact me directly.

2. Information I Collect

I collect information from you in the following ways:

• Initial Enquiries: Name, email address, and phone number provided via my website contact form or email.
• Therapy Process: Once we begin working together, I collect your address, GP details, and brief clinical notes.
• Website Usage: Like most websites, this site may collect basic "Cookies" (e.g., IP addresses) to help the site function correctly and to understand how visitors use the pages.

3. How I Use Your Information

Your data is used solely to:

• Provide professional counselling services to you.
• Process payments and manage session bookings.
• Maintain professional standards (e.g., through anonymous supervision).
• Comply with legal and insurance requirements.
• 
  

4. Confidentiality & Its Limits

Your sessions and personal data are strictly confidential. However, as per my professional contract, there are specific legal and ethical exceptions:

• Professional Supervision: I discuss my work with a qualified supervisor to ensure best practice. Your identity remains anonymous.
• Safeguarding: If I believe there is a risk of serious harm to yourself or others.
• Legal Obligations: If required by a court of law, or in cases involving terrorism or money laundering.

Note: I will always endeavour to discuss any breach of confidentiality with you before taking action.

5. Data Storage & Security

• Clinical Notes: I keep brief, encrypted clinical notes. These are stored securely and are not shared with third parties.
• Retention: In line with insurance requirements, I hold your records for 7 years after our work ends. After this period, they are securely destroyed.
• Payments: Financial transactions (such as bank transfers) are handled through secure banking systems.

6. Your Rights

Under GDPR, you have the following rights regarding your data:

• Access: You have the right to request a copy of the records I hold about you at any time.
• Correction: You can ask me to correct any information you believe is inaccurate.
• Erasure: You can request that I delete your data (though I may be legally required to retain clinical records for a set period).



7. Jurisdiction

Deeper Than Blue Therapy is based in the UK and operates under English Law.