PRIVACY STATEMENT

Data Protection and Privacy

I am registered with the Information Commissioner’s Office (ICO) as a Data Controller and comply with the UK GDPR and Data Protection Act 2018.

Information I Collect

• Your name and contact details (email and/or phone)
  
  

• Emergency contact name and your GP surgery (used only in a strict emergency)
  
  

• Brief, anonymised session notes
  
  

This information is collected solely for counselling-related purposes and will not be shared with anyone without your consent unless required by law (see confidentiality section).

How Data is Stored

All information is stored securely:

• Digital files are password-protected and encrypted.
  
  

• Paper records (if any) are kept in a locked cabinet.
  
  

• Records are retained for seven years after counselling ends, then deleted or destroyed securely.

Your Rights

You have the right to:

• Access and request a copy of your data
  
  

• Ask for corrections if information is inaccurate
  
  

• Request deletion of your data
  
  

• Withdraw consent at any time
  
  

If you wish to exercise these rights or have concerns about how your data is stored, please contact me directly.

Website Data

If you complete a contact form on my website, your details are transmitted securely and used only for responding to your enquiry. No personal information is shared or sold to third parties.

KAS Therapy (Kirsty Stimpson)

ICO Registered Data Controller