Legal

Privacy Policy

Last updated: March 2026

I am committed to protecting your personal data and handling it in a safe and transparent way. This privacy notice explains what information I collect, how I use it, and your rights.

What data I collect

When you contact me by email or phone, I may collect:

  • Your name, address, and other contact details
  • Age, date of birth, gender, pronouns, marital status, ethnicity, religion
  • Information you choose to share about your concerns, history and background
  • Next of kin or emergency contact details
  • Details of any prescribed medication
  • Details of previous therapy
  • Occupation

Why I collect it

I collect personal data solely to:

  • Respond to your enquiry
  • Provide therapy services
  • Maintain clinical records as required by my professional body (UKCP)
  • Ensure your safety during sessions

The legal basis for processing your data is your explicit consent and the legitimate interest of providing therapeutic services.

How I store it

  • Clinical notes are handwritten (not electronic) and stored in a securely locked, fireproof cabinet
  • I minimise the amount of information held about you electronically
  • Online sessions use end-to-end encrypted platforms (Zoom, Bilateral Base, FaceTime)
  • Case material is retained for up to 7 years, in line with professional guidelines, then securely destroyed

Who I share it with

Your information is confidential and is not shared with any third party, except:

  • If there is a serious risk of harm to you or someone else (a legal and ethical requirement)
  • If required by law or court order
  • With your explicit consent (e.g. to communicate with your GP or insurance provider)

I discuss anonymised case material in clinical supervision to maintain professional standards.

Cookies and tracking

This website does not use cookies, analytics, or any tracking technology. No data about your visit is collected or shared with third parties. Fonts are self-hosted - no external services are loaded when you visit this site.

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data I hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (subject to professional retention requirements)
  • Withdraw your consent at any time
  • Lodge a complaint with the Information Commissioner's Office (ICO)

Contact

If you have questions about how your data is handled, contact me at karen@just4therapy.com.

Complaints

My governing body is the United Kingdom Council for Psychotherapy (UKCP). If you wish to make a complaint about how your data has been handled, you can contact the UKCP or the Information Commissioner's Office (ICO) at ico.org.uk.