Summary
- Your privacy and confidentiality are central to my counselling practice.
- I only collect information necessary to respond to enquiries and provide counselling services.
- I do not use an online booking system; contact is via phone, email, or messaging.
- Your data is stored securely using trusted providers such as Gmail and Google Sheets.
- I do not sell or use your data for marketing purposes.
- Your information is only shared where legally required or to prevent serious harm.
- Records are typically retained for up to 7 years.
- You have rights over your personal data under UK GDPR.
- I am registered with the Information Commissioner’s Office (ICO): ZA489420.
1. Who I Am (Data Controller)
Name: Jackie Hart Counselling
Website: https://jackiehartcounselling.co.uk/
ICO Registration Number: ZA489420
Email: jackielisahart@gmail.com
I am the data controller responsible for your personal data.
2. Legal Framework
This privacy policy complies with:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
- Privacy and Electronic Communications Regulations (PECR)
3. Information I Collect
a) When you contact me
- Name
- Email address
- Phone number
- Any information you include in your message
b) During counselling
- Contact details
- Emergency contact details (if appropriate)
- GP details (if relevant)
- Session notes (brief and factual)
- Personal and health information you choose to share
This may include special category data (such as health or mental health information), which is subject to additional legal protection under UK GDPR.
c) Communication data
- Emails (via Gmail)
- Messages (via WhatsApp)
- Notes from phone calls
4. How Your Information Is Collected
- Phone calls
- Emails
- WhatsApp messages
- Direct communication during counselling sessions
No online booking system is used.
5. Lawful Basis for Processing
Your data is processed under the following lawful bases:
- Contract – to provide counselling services
- Legitimate interests – to manage my practice and administration
- Legal obligation – where required by law
- Provision of health or social care – for processing special category data
6. How Your Information Is Used
Your personal data is used to:
- Respond to enquiries
- Arrange and manage counselling sessions
- Provide counselling services safely and effectively
- Maintain accurate records
- Meet legal, professional, and insurance obligations
Your data is not used for marketing.
7. Confidentiality
Confidentiality is a core part of counselling.
Your information will not be shared without your consent except where:
- There is a risk of serious harm to you or others
- There are safeguarding concerns (for example, child protection)
- Disclosure is required by law or court order
Where possible, this will be discussed with you first.
8. Third-Party Services
I use the following trusted third-party services:
- Google (Gmail and Google Sheets) for email communication and record-keeping
- WhatsApp for messaging and phone communication
- Zoom and Microsoft Teams for online sessions when required
These providers may process data outside the UK. Where this occurs, appropriate safeguards are in place to ensure compliance with UK GDPR.
9. Data Storage and Security
Appropriate technical and organisational measures are in place to protect your data, including:
- Password-protected devices and accounts
- Secure cloud storage systems
- Restricted access to personal data
- Secure handling of written and digital records
10. Data Retention
- Enquiry data not taken forward is normally deleted within 14 days
- Client records are retained for up to 7 years after counselling ends
After this period, records are securely deleted or destroyed.
11. Your Data Protection Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data (where legally permitted)
- Restrict or object to processing
- Withdraw consent at any time
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
12. Data Breaches
In the unlikely event of a data breach that affects your personal data:
- You will be notified without undue delay where required
- The Information Commissioner’s Office will be informed if legally necessary
13. International Data Transfers
Some third-party providers (such as Google, WhatsApp, Zoom, and Microsoft) may store or process data outside the UK.
Where this occurs, safeguards such as standard contractual clauses are used to ensure your data is protected to UK GDPR standards.
14. Cookies
This website may use cookies to:
- Ensure the website functions properly
- Monitor basic website usage
- Improve user experience
You can control or disable cookies through your browser settings.
15. Changes to This Policy
This privacy policy is reviewed regularly and may be updated to reflect changes in legal requirements or services.
16. Contact
If you have any questions about this privacy policy or how your data is handled:
Email: jackielisahart@gmail.com