General Data Protection Regulations 2018

Privacy policy

In accordance with the requirements of the General Data Protection Regulations 2018 this privacy policy explains how any information you provide to Counselling with Confidence is used and protected, and why it is collected.

Gaining Your Consent

When you use the services of Counselling with Confidence you will be informed how the information you provide will be used, stored and destroyed. At times, it may become necessary to share this information, for example:

  • In order to protect a child, vulnerable adult, yourself or the public from harm or abuse
  • For the prevention and detection of a crime
  • If I am legally compelled by a court of law.
  • In order to refer you to a third party for additional support

What information is collected

When using the services of Counselling with Confidence you may give personal information, such as:

  • Personal details
  • Family, lifestyle and social circumstances
  • Financial details
  • Employment and education details.

You may also provide sensitive personal information, such as:

  • Physical or mental health details
  • Racial or ethnic origin
  • Religious or other beliefs of a similar nature
  • Relationship, gender and sexuality details
  • Offences and alleged offences.

This information might be obtained in person, by phone or by email.
Each time you visit my website the following information may be automatically collected:

  • Technical information – including the Internet Protocol (IP) address used to connect your computer to the internet; your browser type and version; the time zone setting; and your operating system and platform
  • Information about your visit – including your clicks to, through and from this site; the pages you view or search for; the length of your visit to certain pages; and your page interaction information, such as scrolling and link clicks.
  • The website has an SSL certificate which prevents transferred data being read or modified.

What your information is used for

Your information may be used to:

  • Respond to any enquiries you make
  • Provide information and services you request
  • Carry out the contract agreed between us
  • Contact you regarding appointments and service feedback
  • Tell you about changes to the service
  • Identify and protect those at risk of harm or abuse, including yourself
  • Maintain accurate records and accounts, and to operate the business
  • Meet statutory obligations, for example by insurers or professional bodies

How your information is protected

Any information you provide is confidential, except when I have a professional or legal obligation to share it or in circumstances where you authorise it to be shared. Your information is stored securely and access to it is controlled and restricted. Information is securely destroyed in accordance with the minimum time period stated by legal and professional regulations (Currently 7 years after the end of our therapeutic relationship).

The transmission of information via the internet is not completely secure. Although I endeavour to protect your personal data, the security of information transmitted to my website or via email, text message or voicemail message cannot be guaranteed. Any personal information you send is at your own risk. Once I have received your information, I will use strict procedures and security features to try to prevent unauthorised access.

I store clients’ name and contact details in a paper file in a locked cabinet and/or on a mobile phone contact list (the mobile phone used is for work purposes only and not personal use, I do not store your whole name and it has a passcode lock).

How to access and amend your information

You can request access to the information held about you. You may also ask for this personal information to be amended or deleted. I will undertake to do this, except in circumstances where I am required to keep the information for legal, professional or auditing purposes. Any requests for your information to be accessed, shared, amended or deleted must be made in writing and I will respond within one calendar month.

Whom to contact

In accordance with the General Data Protection Regulations 2018 (GDPR), the data controller for Counselling with Confidence is Kirstie McEwan. I am responsible for collecting and processing your personal information. Processing includes the retrieval, organisation, use, protection, and deletion or destruction of information, and its disclosure to other agencies where requested by you as a client or as a legal requirement.

A full list of what information I control and process, and for what purposes, is set out in the Information Commissioner’s Office register of data controllers. My registration number is
ZA066805, and the registration can be viewed on the Information Commissioner’s Office website.

Questions, comments, information access and amendment requests, and any complaints should be addressed to:

Kirstie McEwan and emailed to