Privacy Policy
Last updated: October 2025
At GM Counselling and Therapy Limited (“we”, “our”, “us”), we are committed to protecting your privacy and ensuring that any personal information you share with us is handled with care, respect, and in accordance with data protection law, including the UK GDPR and the Data Protection Act 2018.
This Privacy Policy explains what information we collect, how we use it, and your rights.
1. Information We Collect
We may collect and process the following personal information:
-
Contact details: name, email address, phone number.
-
Appointment information: dates, times, attendance.
-
Health and wellbeing information: information you choose to share during counselling sessions that may be relevant to your care.
-
Payment details: if applicable, for processing payments.
-
Website usage information: such as IP address and browsing activity (via cookies – see Section 7).
2. How We Use Your Information
We use your information to:
-
Provide counselling and therapy services.
-
Manage appointments and communicate with you.
-
Keep accurate and confidential case notes, in line with professional and ethical obligations.
-
Process payments and maintain financial records.
-
Improve our website and services.
-
Meet our legal and regulatory obligations.
3. Confidentiality
Everything you share in counselling sessions is kept strictly confidential, with the following exceptions:
-
If we believe you or someone else is at serious risk of harm.
-
If required by law or court order.
-
If you give explicit consent to share information (e.g. with a GP or another professional).
4. Legal Basis for Processing
We process personal data on the following bases:
-
Consent: when you agree to engage in counselling and provide information.
-
Contract: to deliver the counselling service you have requested.
-
Legal obligations: for record-keeping, safeguarding, and compliance with professional requirements.
-
Legitimate interests: to improve services and manage our practice.
5. How We Store and Protect Your Data
-
Session notes and records are stored securely (locked storage or encrypted digital systems).
-
Personal data is only accessed by authorised personnel.
-
Data is retained only as long as necessary: typically 7 years after your last session, unless required longer by law or insurance purposes.
-
After this period, records are securely destroyed.
6. Sharing Your Information
We do not sell or trade your personal data.
We may share information with:
-
Other professionals (only with your consent, unless in safeguarding circumstances).
-
Service providers who support our business operations (e.g. secure practice management systems, payment processors).
-
Regulators, insurers, or legal authorities where required.
7. Cookies and Website Data
Our website may use cookies to:
-
Improve your browsing experience.
-
Collect anonymous analytics about website usage.
You can manage or disable cookies in your browser settings.
8. Your Rights
You have the right to:
-
Access the personal data we hold about you.
-
Request correction of inaccurate information.
-
Request deletion of your data (where legally permissible).
-
Restrict or object to certain processing.
-
Withdraw consent at any time (this will not affect past lawful processing).
9. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact us.
