At The Listening Room, I take your privacy seriously. This Privacy Policy explains how I handle your personal information in line with professional ethical standards and the requirements of the UK GDPR and the Data Protection Act 2018.

Who I Am

I am the Data Controller of your personal information. 

If you have any concerns about how your information is handled, you also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

What Information I Collect

To provide therapy services, I may collect the following personal data:

• Your name, address, date of birth, and contact details.

• GP or emergency contact information (with your consent).

• Relevant medical or mental health history.

• Session notes, which are kept brief and factual.

• Payment records for therapy sessions.

Why I Collect This Information (Lawful Basis)

The lawful bases under the UK GDPR for processing your personal data are:

• Contract – to provide you with a therapy service.

• Legal obligation – to keep records as required by law.

• Vital interests – if I need to share information to protect your life.

• Legitimate interests – for safe and effective practice management.

• Consent – where explicit permission is required (e.g., contacting your GP).

Confidentiality & Information Sharing

Your information is confidential and will not be shared with anyone outside the practice unless:

• You give clear written consent.

• I believe you are at risk of serious harm to yourself or others.

• I am required to do so by law (e.g., safeguarding concerns or a court order).

• I discuss my work in clinical supervision — but your identity will not be revealed.

How Your Information Is Stored

• Paper records (if used) are stored securely in locked storage.

• Digital records are password-protected and stored on secure systems.

• Records are kept for [X years, usually 7 years] after therapy ends, as required by law, and then securely destroyed.

Your Rights Under GDPR

You have the following rights regarding your personal data:

• The right to access a copy of the information I hold about you.

• The right to correct any inaccurate information.

• The right to request erasure of your data (where legally possible).

• The right to restrict or object to certain forms of processing.

• The right to data portability (transfer of your data).

If you wish to exercise any of these rights, please contact me using the details above.

Website & Cookies

If you use my website, standard cookies and analytics may collect basic technical data such as IP address and browsing activity. This helps improve website functionality. You can manage or disable cookies through your browser settings.

Changes to This Policy

This Privacy Policy may be updated from time to time. The most recent version will always be available on my website or upon request.