This page explains how I handle your personal information. The short version is that I avoid cloud-based systems whenever possible. I keep minimal records and delete everything after our work together ends. I will never share your personal information in written form without your explicit permission.
I use Proton services for email. This is end-to-end encrypted and they are based in Switzerland.
For video calls, I use Whereby. They are based in Norway. All individual therapy calls are end-to-end encrypted. Group calls are encrypted in transit. The technicalities are explained in Whereby’s privacy policy.
For time-sensitive communication, you’re welcome to SMS or WhatsApp me. SMS is not encrypted. WhatsApp is end-to-end encrypted, though it is owned by Meta and subject to their privacy policy.
I generally prefer email.
I keep brief, anonymised notes on our sessions. These are stored on a password-protected laptop in a password-protected folder. I do not use cloud storage.
The contract you sign before we start work together is a WordPress plug-in on my website. All your information is held by me, not a third party.
Every word on this website was written by me. I use AI (Claude) to help with editing. Claude also coded this website’s structure and created some of the images. All the photos are mine. No client data is ever shared with Claude or anyone else.
I do not share your personal information in written form with anyone without your explicit written permission, unless I am subpoenaed by a judge to do so. I am also obliged to report serious harm to a child.
As required by my professional body (BACP), I discuss my client work with a clinical supervisor. This is done verbally and I’ll only use your first name. I can use a pseudonym if you prefer.
I won’t speak to your GP without your explicit permission. You do not need to give me your GP’s details.
Session notes are deleted automatically 90 days after our final session. Invoices will be deleted 7 years after our final session.
You have the right to access the information I hold about you, to request that it be corrected, and to ask for it to be deleted. You also have the right to object to how I process your data, and to withdraw consent at any time.
If you have concerns about how I handle your data that we can’t resolve between us, you can escalate to the Information Commissioner’s Office (ICO) at ico.org.uk, or to the BACP. You can view my profile at the ICO here. (It’s not very exciting.)
If anything here is unclear, or you want to know more, please get in touch. I’d rather you asked.