Privacy Notice

Privacy Notice (UK GDPR & Data Protection Act 2018)

This privacy notice explains how your personal data is collected, stored, and used in line with current UK data protection law.

Data Controller: Amy McHugh, Counsellor (ICO‑registered).

What Data I Collect

• Contact details (name, phone number, email)

• Emergency contact information

• Brief assessment information

• Session notes

• Payment records (no card details stored)

Why I Collect Your Data

Your data is used solely for:

• Providing counselling safely and effectively

• Managing appointments and communication

• Meeting legal, ethical, and professional obligations

• Ensuring continuity of care

How Your Data Is Stored

• Digital records are encrypted and password‑protected

• Paper records (if used) are stored in a locked cabinet

• Only I have access to your data

How Long Your Data Is Kept

Your records are retained for seven years in line with professional guidance and insurance requirements, then securely destroyed.

Sharing Your Data

Your data is never shared with third parties unless:

• You give explicit consent

• There is a risk of serious harm

• I am legally required to share information

Your Rights

You have the right to:

• Access your data

• Request correction of inaccurate data

• Request deletion (where legally permissible)

• Withdraw consent (where consent is the lawful basis)

• Raise concerns with the ICO

Concerns or Questions

If you have concerns about how your data is handled, please raise them with me in the first instance. 

You may also contact the Information Commissioner’s Office (ICO).