​

​I collect only the information needed to provide counselling or coaching services safely and effectively. This may include your name, contact details, emergency contact, assessment information, session notes, and correspondence about appointments. The lawful basis for collecting and storing this data includes contractual necessity (to deliver a service), legal obligations (such as record keeping), and, in some cases, your explicit consent.

​

Your information is securely stored using encrypted, password-protected systems, and any handwritten notes are kept in a locked cabinet. My website does not permanently store personal information — contact form messages are sent directly to my secure email. Records are retained in line with professional guidance, typically for seven years after the end of therapy, after which they are securely destroyed.

​

All sessions are confidential. The only exceptions to this are rare circumstances where I may need to share information — for example, if I believe there is a risk of serious harm to you or another person, if there are safeguarding concerns, or if I am required to do so by law. I also discuss my work anonymously in supervision to ensure safe and ethical practice. Wherever possible, I will talk with you before sharing any information.

​

You have the right to access, correct, or request deletion of your personal data, and to withdraw consent at any time. If you have any questions or concerns about how your data is handled, please contact me at lucy@whitepebbletherapy.co.uk. You can also learn more about your data protection rights or raise a concern with the Information Commissioner’s Office (ICO) at www.ico.org.uk.