Privacy Policy Last updated: November 2025
1. Introduction
I, Charlotte Dowson, am a counsellor registered with the British Association for Counselling and Psychotherapy (BACP). I am committed to protecting your privacy and handling your information in line with the UK GDPR, the Data Protection Act 2018, and the BACP Ethical Framework. This policy explains how I collect, use, and store your personal information when you visit my website or engage in therapy with me.
2. Data Controller
Charlotte Dowson
Email:[Your professional email]
Phone: [Your professional number]
I am the data controller responsible for the personal information I hold about you.
3. Information I Collect
I collect and process personal information that you provide directly, including:
Your contact details (name, phone number, email address)
Information shared in initial enquiries and during sessions.
Brief session notes
Payment and scheduling details
My website may also collect limited anonymous data through cookies or analytics tools.
4. How I Use Your Information
Your information is used to: Arrange and provide counselling sessions
Manage records and payments
Communicate about appointments
Meet professional, ethical, and legal obligations
I will never share or sell your data for marketing or any unrelated purpose.
5. Lawful Basis for Processing
I process personal data under the following lawful bases:
Contract: to deliver counselling services you request
Legal obligation: to meet professional and insurance requirements
Consent: when you contact me through this website or agree to therapy
Legitimate interest: to manage and improve my practice
6. Confidentiality and Data Sharing All information shared in counselling is confidential. I only break confidentiality if: You or someone else is at serious risk of harm I am legally required to disclose information (e.g. by court order) I may discuss my work in supervision, as required by the BACP Ethical Framework, but clients are not identifiable. Secure third-party services (e.g. email, video platforms, payment systems) may handle data in compliance with UK GDPR.
7. Data Security and Retention
All records are stored securely in encrypted digital files or locked storage.
I keep client records for 7 years after therapy ends, in line with BACP guidance and insurer requirements, then delete or destroy them safely.
8. Your Rights You have the right to: Access the data I hold about you Request corrections or deletion Withdraw consent (where applicable) Raise a concern with the Information Commissioner’s Office (ICO) at https://ico.org.uk