top of page

Privacy Notice

(In accordance with the UK GDPR and Data Protection Act 2018)
Date effective: 13/11/2025

​​

1. Purpose of this Notice

This Privacy Notice explains how your personal information is collected, used, and stored when you engage in therapy with me. It also outlines your rights under data protection law.

​​​​

2. What Information I Collect

I collect and store the following information:

  • Your contact details (name, address, phone number, email)

  • GP and emergency contact details

  • Relevant background and health information you choose to share

  • Session notes and records related to therapy

  • Communication records (emails, appointment details, invoices, etc.)

​​

3. Why I Collect This Information

Your information is collected to:

  • Provide therapy services safely and effectively

  • Maintain professional records required by ethical and legal standards

  • Contact you regarding appointments, updates, or emergencies

  • Protect your wellbeing in cases of risk or crisis

​​

4. Legal Basis for Processing

Under the UK GDPR, the lawful bases for processing your data are:

  • Contract: To deliver the therapy service you have requested.

  • Legitimate Interests: To maintain appropriate records and manage my business effectively.

  • Legal Obligation: To meet regulatory and professional record-keeping requirements.

  • Vital Interests: To protect you or others in cases of serious risk of harm.

  • Consent: When you have given explicit consent (e.g., for me to contact your GP).

​

5. Confidentiality and Information Sharing

All information shared in therapy is confidential. I will not share your personal data with anyone else unless:

  • There is concern about serious harm to yourself or someone else;

  • I am required to do so by law (e.g. court order); or

  • You have given explicit consent to share information (e.g. with your GP).​​​​

​

6. Data Storage and Security

  • Records are kept securely in password-protected files and/or locked storage.

  • Only the therapist has access to these records.

  • Electronic communications are stored securely and deleted when no longer needed.

​

7. How Long Your Data is Kept (Retention)

  • Adults: Records are retained for 7 years after your last session.

  • Under 18s: Records are retained until the client reaches age 25, or 7 years after the last session, whichever is longer.

  • Initial enquiries (no sessions): Deleted after 6 months.

After this period, all data is securely deleted or shredded.

​

8. Your Rights

You have the right to:

  • Access a copy of your data

  • Request correction of inaccurate information

  • Request deletion of your data (where legally appropriate)

  • Restrict or object to certain processing

  • Withdraw consent at any time

  • Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled:
    www.ico.org.uk | 0303 123 1113

​

9. Updates to This Notice

This Privacy Notice may be updated occasionally to reflect changes in legal or professional requirements. The most recent version will always be available on request.

​

10. Contact

If you have any questions or wish to exercise your rights regarding your data, please contact:
Emily Scott
Email: emkindtherapy@gmail.com
Telephone: 07384347669

bottom of page