Privacy Notice (UK GDPR)
Caroline Hall Counselling – Privacy Notice (UK GDPR)
Data Controller: Caroline Hall, Caroline Hall Counselling
Contact: carolinehallcounselling@outlook.com
Information I Collect
I may collect the following information to provide counselling safely and professionally:
• Contact details
• GP and emergency contact information
• Brief session notes
• Relevant health or wellbeing information you choose to share
• Payment information (if applicable)
Lawful Bases for Processing
I process your data under the following lawful bases:
• Contract – to provide counselling sessions
• Legitimate Interests – to keep necessary records
• Special Category (Health) Data – information you share as part of receiving therapeutic support
How Your Information Is Used
Your information is used to:
• Arrange sessions and communicate with you
• Provide counselling
• Keep required records
• Support anonymised supervision
• Protect safety in a crisis
• I do not share your information for marketing.
Storage and Security
Records are stored securely, either encrypted digitally or locked physically.
Only I access them unless disclosure is legally required or necessary for safety.
Retention
For adults, records are kept for 7 years after therapy ends.
They are then securely destroyed.
Sharing of Information
Information is only shared when:
• There is serious and imminent risk of harm
• Safeguarding requires it
• I am legally compelled to share information (such as by a court order)
Supervision is always anonymised.
Your Rights
Under UK GDPR, you have the right to:
• Access your data
• Request corrections
• Request deletion (where possible)
• Object to or restrict processing
• Complain to the Information Commissioner’s Office (ICO)
ICO website: https://ico.org.uk
Complaints
If you have concerns about how your data is handled, please contact me first.
You may also raise a concern with the ICO.