I am committed to protecting your privacy and handling your personal information with care. This page explains what information I collect, how it is used, your rights under UK GDPR and the Data Protection Act 2018, and what to do if you have concerns about how I use your information.

​​

Information I Collect

To provide counselling safely and professionally, I may collect:

• Your name and contact details

• Emergency contact information

• Brief notes relevant to our work together, stored under your initials

​​​

I do not record sessions in any form. You agree not to record sessions (audio, video, screenshots, or screen recordings) without my written consent.

​​

I do not use AI tools for note taking or session notes, because I prioritise the relational aspect of our work, and your confidentiality first and foremost.

​​​

How Your Information Is Stored

• Any personal identifying information is kept securely in a locked cabinet in my workspace.

• I store your phone number in my work mobile, under your initials. 

• Digital communications (such as emails) are stored on password‑protected devices.

• I do not store identifiable information on cloud‑based systems, however, I do use Google Sheets for an anonymised record (stored under your initials) of the sessions I hold.
   

Online Sessions

I use platforms and settings designed to support your privacy. I use Google Meet for online sessions. However, no online communication can be guaranteed completely secure. By choosing online sessions, you acknowledge the potential risks involved in using third‑party technology.
 

How Long Your Information Is Kept

In line with professional and legal requirements, I keep your records for 7 years after our work together ends. After this time, they are securely destroyed.

​

Sharing Your Information

Your information is confidential. I will only share it:

• With your explicit consent

• If required by law

• If there is a serious risk of harm to you or others

• In professional supervision, where your identity is protected

• In the event of my being incapacitated, I have a clinical executor, who has instructions of how to access this information securely. 

​

Third‑Party Services

I do not currently use third‑party apps for note‑taking or data storage. If I choose to use a service in the future, I will ensure that:

• Any notes are fully anonymised

• The service is GDPR‑compliant

• Your identifiable information is never uploaded without your explicit consent

 

Any updates will be reflected in this privacy statement.

​

Cookies

My website uses Wix Analytics, which collects anonymised information such as visitor numbers, pages viewed, and general location (city/region). These analytics cookies are non‑essential and will only run with your consent.

​

Your Rights

Under UK GDPR, you have the right to:

• Access the information I hold about you

• Request corrections

• Request deletion (in certain circumstances)

• Withdraw consent (where applicable)

• Raise concerns with the Information Commissioner’s Office (ICO)
   

Data Protection Concerns or Complaints

If you have any concerns about how I handle your personal information, please contact me via email (christina@christinabtherapy.co.uk) so I can address the issue. I will respond to data protection concerns within one month, in line with UK GDPR guidance. If you feel that your concern has not been resolved, you have the right to raise the matter with the Information Commissioner’s Office (ICO), the UK authority for data protection. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.