top of page

Babbling Brook Therapy Privacy Notice.


Your privacy is very important to me and you can be confident that your personal information will be kept safe and secure and will only be used for the purpose it was given to me. I adhere to current data protection legislation as required by UK-GDPR regulations and Data Protection Act 2018. This privacy notice tells you what I will do with your personal information, from initial point of contact, through to after your therapy has ended. I am the Data Controller for Babbling Brook Therapy.

I am registered with the Information Commissioners office reg. no ZB297743

Lawful Basis

GDPR states I must have a lawful basis for processing your personal data, which are as follows:

If you are currently in therapy or in contact with me to consider therapy, I will process your data where it is necessary for the performance of our contract on the basis of your consent. Consent can be withdrawn at any time by contacting me to inform me.

If you have had therapy with me and it is now ended, I will use legitimate interest as my lawful basis for holding and using your personal information.

GDPR also ensures I look after any sensitive personal information that you disclose to me appropriately. This type of information is called ‘special category personal information’. The lawful basis for me processing any special categories of personal information is that it is for the provision of health treatment (in this case counselling) and necessary for a contract with a health professional (in this case, a contract between you and me).

How I use your information and data security.

When you contact me with an enquiry about my counselling services I will collect information to help satisfy your enquiry. This will include name, contact details and reason for enquiry. Alternatively, a GP, parent or trusted individual may give me your details with your consent and on your behalf.

Rest assured that everything you discuss with me is confidential. That confidentiality would only be broken if you or someone else is at serious risk of harm, a very serious crime has been committed or under subpoena from a court. I would always try to obtain your agreement first, unless there are safeguarding issues that prevent this.

Records of personal details will be kept securely to enable my service to you to run smoothly. Digital data will be stored on a device with a password, and not shared with any third party. My email account is also password protected. Written notes from our sessions will be stored in a locked filing cabinet only accessible by me as required to fulfil our contract.

Digital and Written notes will be kept for a period of time after counselling has ended, then will be destroyed. If you want your information destroyed sooner please contact me in writing.

In the event of my death or permanent incapacitation all notes will be securely shredded by a fellow fully qualified practitioner who adheres to the BACP’s ethical framework as I do.

Visiting my Website

When you visit my website, I use a third party service,, to collect standard internet log information and anonymous details of visitor behaviour patterns. Neither I, or, attempt to identify my visitors. I use legitimate interests as my lawful basis for holding and using your personal information in this way when you visit my website.

I use Google Analytics so I can continually improve my service to you. You can read Google’s privacy notice here

Like most websites we use cookies to help the site work more efficiently-find out about our use of cookies

No user specific data is collected by me or by any third party. If you fill in a form on my website, that data will be temporarily stored on the web host before being sent to me.

Your rights

Under data protection law, you have rights; you can read more at

Your right of access - You have the right to ask me for copies of your personal information.

Your right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.

Your right to erasure - You have the right to ask me to erase your personal information.

Your right to restriction of processing - You have the right to ask me to restrict the processing of your personal information.

Your right to object to processing - You have the the right to object to the processing of your personal information.

Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you.

Please contact me in writing via post or email if you wish to make a request relating to your data and I will respond within one month.

If you have any complaint about how I handle your personal data please write to me, suggestions for improvement are always welcome.

If you have a formal complaint about how I have processed your information please contact the ICO which is the statutory body that oversees data protection law in the UK. For more information go to a complaint.

bottom of page