Privacy Policy
This Privacy Policy explains how I collect, use, store, and protect your personal data when you access my online therapy services. I am committed to safeguarding your privacy and complying with UK data protection legislation, including the UK GDPR, the Data Protection Act 2018, and the requirements of my professional insurer.
I am registered with the Information Commissioner’s Office (ICO) as a Data Controller.
1. Who I Am Data Controller: Abi Hendra Counselling
Therapy Modality: Somatic Relational Therapy
Email: abihendra@hotmail.co.uk
ICO Registration Number: ZB049057
As a sole practitioner, I determine how and why your personal data is processed when you engage my online therapy services.
2. The Data I Collect I only collect information necessary to provide safe, ethical, effective therapy.
Personal Identification Data:- Name, date of birth, contact details, emergency contact information, country of residence.
Special Category Data:- Mental and physical health information, somatic experience data, psychological history, identity- related information (if shared), and session notes.
Technical and Communication Data:- IP address, device/browser info, analytics, emails, messages, consultation forms, appointment info.- Sessions are not recorded.
3. Purposes for Processing Your Data- Suitability assessment, therapy provision, record-keeping, communication, safeguarding, legal compliance, payments, administration.- No automated decision-making or marketing use.
4. Lawful Bases for Processing- Contract (Article 6(1)(b))- Legal Obligation (Article 6(1)(c))- Legitimate Interests (Article 6(1)(f))- Explicit Consent (Article 9(2)(a))- Vital Interests (Article 6(1)(d))
5. Confidentiality & Safeguarding Exceptions apply if:- Risk of harm to self or others- Legal obligations- Safeguarding risks- Court orders I will discuss disclosure wherever possible.
6. How Your Data Is Stored - Encrypted, password-protected systems.- No session recordings or stored payment details.- Some data may be processed on UK, EEA, or adequacy-approved servers.
7. Data Retention- Adult clinical records: 7 years- Under 18s: until age 25 (or 26 if seen at 17)- Financial records: 7 years- Enquiries not proceeding to therapy: up to 6 months
8. Sharing Your Data Data may be shared only with:- Supervisor (anonymised)- Safeguarding or emergency services- Legal authorities- IT or practice management providers- Secure payment processors No marketing use.
9. International Clients & Data Transfers Transfers occur only with:- Adequacy decisions, or- Standard Contractual Clauses and protections.
10. Your Rights Under UK GDPR You may request:- Access, correction, deletion (where possible)- Restriction or objection- Withdrawal of consent- Data portability Concerns may be raised with the ICO.
11. Cookies My website may use cookies for analytics and essential functionality.
12. Updates to This Policy Updates will be posted on my website.
13. Contact Abi Hendra Counselling
Email: abihendra@hotmail.co.uk
ICO Registration Number: ZB04905