Privacy Policy
This page explains how I handle your personal information. The short version is that I avoid cloud-based systems whenever possible. I keep minimal records and delete everything after our work together ends. I will never share your personal information in written form without your explicit permission.
I use Proton services for email and video calls. All their services are end-to-end encrypted and they are based in Switzerland.
For time-sensitive communication, you’re welcome to SMS or WhatsApp me. SMS is not encrypted. WhatsApp (Meta) is end-to-end encrypted, though it is owned by Meta and subject to their privacy policy.
I generally prefer email.
I keep brief, anonymised notes on our sessions. These are stored on a password-protected laptop in a password-protected folder. I do not use cloud storage.
The contract you sign before we start work together is handled by Signable, a digital document signing service. This involves whatever personal details you provide when signing, which are held on their platform. You can read their privacy policy at signable.co.uk.
I do not share your personal information in written form with anyone without your explicit written permission, unless I am subpoenaed by a judge to do so.
As required by my professional body (BACP), I discuss my client work with a clinical supervisor. This is done verbally and I’ll only use your first name.
Session notes are deleted automatically 90 days after our final session. Invoices will be deleted 7 years after our final session.
You have the right to access the information I hold about you, to request that it be corrected, and to ask for it to be deleted. You also have the right to object to how I process your data, and to withdraw consent at any time.
If you have concerns about how I handle your data that we can’t resolve between us, you can escalate to the Information Commissioner’s Office (ICO) at ico.org.uk, or to the BACP.
If anything here is unclear, or you want to know more, please get in touch. I’d rather you asked.